last executing test programs: 7.953977607s ago: executing program 3 (id=2265): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000008500000033000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x2904c, 0x0, 0x10003}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={0x0}, 0x20) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0xe6, 0x0, &(0x7f0000000480)=""/230, 0xf3}, &(0x7f0000000340)=0x43) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010067656e6576650000280002801400070000000000000000000000000000000001060005000000000008000b4000007fff"], 0x58}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000480)}}], 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 6.848454968s ago: executing program 0 (id=2273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=ANY=[@ANYBLOB="f4040000", @ANYRES16=r1, @ANYBLOB="010003000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0800cd0000000500cf043300802cde00080211000001080211"], 0x4f4}}, 0x0) syz_emit_ethernet(0x97, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @dev}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x1b, 0x4, 0x2, 0x0, 0x3, 0x66, 0x4, 0xe, 0x84, 0x6, @local, @rand_addr=0x64010101, {[@noop, @rr={0x7, 0x7, 0x90, [@remote]}, @timestamp_addr={0x44, 0x2c, 0x29, 0x1, 0x3, [{@loopback, 0xfffffffc}, {@multicast2, 0x200007}, {@local, 0x80}, {@multicast2, 0x10000}, {@broadcast, 0x8}]}, @noop, @lsrr={0x83, 0x1f, 0xeb, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @empty, @multicast1, @loopback]}, @ra={0x94, 0x4, 0x1}]}}, "81"}}}}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x274, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x39, 0x3, "3f3e620d0ef425cba39abde2a4a4e4a5ce866cfda8b683e61686a2b6d40127368c054d7fd4d0f87c28ccd256bbbb53dcee05ee9736"}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "c4537f6cf61fd820ece4a4cbc6fa6e966ad587a85c523875f16dde64a40b80917ae3801f9dd4928189a0f21d043fc4b326f5842d7b71182c3c9e68408d2e0233806eac1ded29715d747324c761e76989eb766dddb2413c76079dfc49c10f5d8f62c62bab0087ff05"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x24}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2226}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x84}, 0x8080) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000006b40)={'sit0\x00', &(0x7f0000006a80)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg$inet6(r5, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}], 0x1, 0x0) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="d00000361fffffffffff080211000000505050505050000004"], 0x1e) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="0400ff000a00e3929809b814926f0000060098005909000008009e0008"], 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB='P'], 0x32) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000002c0)=0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x120, r10, 0x7d8ef487a120937d, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x3b5bef62e1571d3d, 0x0, 0x0, {{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@multicast2, 0x3, 0x33}, @in6=@remote, {0x0, 0x0, 0x100}}, 0x0, 0xffffffff}}, 0xf8}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}}}) 6.839351794s ago: executing program 3 (id=2274): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$kcm(0xa, 0x0, 0x87) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x5, &(0x7f0000000280)=[{0x7, 0x3, 0xff}, {0x7, 0x2, 0x5, 0x3}, {0x1, 0x3, 0x0, 0xffffffff}, {0x1, 0x29, 0x3, 0x3c}, {0x201e, 0x6, 0x4, 0x1007}]}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) write$binfmt_elf64(r4, &(0x7f0000019680)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020006000500000000000000000000004000000000000000000000000000f50000000038000000000000000000000000000000000023020000000000000000000000000000000000000000000000000000000000000000000000000000a8b6e136545d98c9ed204d101fe2c436acfc6d40a9a82cfdda4be4f4e882bc7ce04f834c06a98cb43d87b6ae920c1064a299b9a9a2ec99c2de5c4c1ab61977134752fd349b4e6a57a00ac90ceb1e245aa32c2caf8f37fedc36bed03c1cac11f3bcebf13fbe0463b07111000000"], 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000680)=""/102373, 0x18fe5}], 0x1, 0x0, 0x9c) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) io_uring_setup(0x49c4, &(0x7f0000000180)={0x0, 0x9c9a, 0x4, 0x2, 0x4, 0x0, r3}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0xd4a4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}], 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r9, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 6.598082838s ago: executing program 1 (id=2275): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r1 = syz_io_uring_setup(0x18b0, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000340)=0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}]}, 0x44}}, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000000), 0x100000008) 6.529741883s ago: executing program 1 (id=2276): socket$inet6(0xa, 0x1, 0x6) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001140)={0x1, &(0x7f0000000100)=[{0xfffe}]}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00e00b0000000000000000d521ab5af806a611"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000000)=""/4098, &(0x7f0000001080)=0x1002) r2 = getpgrp(0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x27, 0x24, 0xffffffffffffffff, @prog_fd}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001040)={0x8, 'bond_slave_1\x00', {'veth0\x00'}, 0x8001}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000), 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000200), 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5], 0x24}}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usbip_server_init(0x5) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x1f, 0x0, 0x0, 0x0, 0x6}, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x2001) bind$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x2, 0x4e23, @broadcast}, 0x10) 5.973516967s ago: executing program 2 (id=2280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010000304000000010000000000007400", @ANYRES32=r9, @ANYBLOB="00000000031201002c0012800b00010062726964676500001c000280050019000700000008000500010000000500170000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}], &(0x7f00000001c0)='syzkaller\x00', 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, 0x17, r5, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x10, 0x1d, 0xb06}, 0x10, 0x1bfc6, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[r0, r0, 0xffffffffffffffff, r2, r6], &(0x7f00000004c0)=[{0x3, 0x3, 0xc, 0x4}, {0x1, 0x4, 0x2}], 0x10, 0x34}, 0x90) sendmsg$TIPC_NL_NAME_TABLE_GET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r11) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x20000000000001b8, &(0x7f00000008c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0xffffffffffffffe0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 5.866008912s ago: executing program 3 (id=2281): socket$inet6(0xa, 0x1, 0x6) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001140)={0x1, &(0x7f0000000100)=[{0xfffe}]}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00e00b0000000000000000d521ab5af806a611"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000000)=""/4098, &(0x7f0000001080)=0x1002) r2 = getpgrp(0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x27, 0x24, 0xffffffffffffffff, @prog_fd}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001040)={0x8, 'bond_slave_1\x00', {'veth0\x00'}, 0x8001}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000), 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5], 0x24}}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usbip_server_init(0x5) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x1f, 0x0, 0x0, 0x0, 0x6}, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x2001) bind$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x2, 0x4e23, @broadcast}, 0x10) 5.286247476s ago: executing program 0 (id=2282): r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x11, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x2]}, &(0x7f0000000080), &(0x7f0000000100)={0x0, 0x3938700}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001dc0), 0x213, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="02010001"], 0x10}}, 0x0) syz_emit_vhci(0x0, 0x7) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @empty}, @in6={0xa, 0x0, 0x0, @mcast1}, @in6={0xa, 0x0, 0x10000, @private1}, @in6={0xa, 0x4e24, 0x66b, @private1, 0x2}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @multicast2}], 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90424fc60100005000a000200053582c137153e3704000180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) getpid() 5.097713524s ago: executing program 5 (id=2283): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r0 = io_uring_setup(0x17c7, &(0x7f00000002c0)) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000048000)=0x5000000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.005666807s ago: executing program 2 (id=2284): syz_emit_vhci(0x0, 0x22) openat$uinput(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/102386, 0x18ff2}], 0x1, 0x400000, 0x81) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="2d9d7ab861bd4d304d57ab9f4ed1108b1c6e2a9dc73e476201"], 0xe3) socket$inet6(0xa, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRESOCT=r0], 0x1a) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000000c0)=0x1) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000001c0)=""/2) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r2 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) 4.863437229s ago: executing program 0 (id=2286): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2, 0x1, 0x3, 0x2104, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0x1d, 0xa, 0x0, 0xfffffffd}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @jmp]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0xfffffffffffffccc}, 0x2d) 4.042220088s ago: executing program 5 (id=2287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)={0xfc, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc3, 0x3, "86c84a14cf1d96441f2cd8561728d7a2fb1159f93583276a6a71da62db1611e09f9d84a4b74fed066f07ae598c60c91bab115e53a159c9422bb41c7da8bb17dca5ee8d88485822314b123bc0a7160e103c2b82416943c13c1fd9d73b9b7ab2a8bc1a2bfb434272d8a4b52a113bcada5ab1559879fb4a96355f05c89c3c9eb9fd8fffcc7279d5f7ce36e8b50d5f4c9bfb9dba5bae8be1fc4346596b1005a0047a0283df44d1fc8f7ec2f1bfe4b7b7b6420e0e4b6a92599cfee30c379666595f"}, @TIPC_NLA_NODE_ID={0x8, 0x3, "b23c6ff7"}]}]}, 0xfc}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1000, 0x0) splice(r5, 0x0, r8, 0x0, 0x80, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0x8, 0x34000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x64}}, 0x0) socket$inet(0x2, 0x3, 0x8) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000210000280012800b00010067656e6576650000180002"], 0x17}, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0], 0x48}}, 0x0) sendmmsg$alg(r12, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.974236203s ago: executing program 2 (id=2288): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x5c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e84cad483d2058fc"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="88df7aceebdb8d6266f5420d8707f034e7bf87f541a7234e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="499f28b2e1ea83e55723d70db3f0a2f5"}]}]}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0) 3.734127817s ago: executing program 2 (id=2290): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) 3.444435345s ago: executing program 2 (id=2291): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x2, 0x9, @private0}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)='i', 0xffffffffffffff0f}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80140010}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x26000000}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="672d6a44b036", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) read$FUSE(r5, &(0x7f0000003000)={0x2020}, 0x2020) sendmmsg$inet(r5, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)="668546927ae520a8f3049a2f50ca1553a5e62dc469b5b2348ffe35a76a94a3ad96f8e87e3bd8a5c3c8ce4da39c468ccfb81bc03e88c8a813e9ce7cb1410024b82b58364f6dc5fbf35e04c17ccb4c793d5578c99cf2e1fe30481bb07c86c6806ad25840494578c1516bc6d6e1942cc9f6d3b5491d949c4b93d7a403ca75cb7bc8fea7d325645cbe4c87da88e362c3ae3206fe2d3d88d62500c4f5ccbc1af04079cc5d49c05f487f40ed97703cf5f46cc9d074e5a8811d3e43b5b4f6456c508e0695433ea9f6", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001800)="db", 0x1}], 0x1}}], 0x2, 0x0) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) sendto$inet(r2, &(0x7f00000004c0)="ee9ee4db489a1c9047aae42880c82ff8503bfdf661bed723628ac05422e69272652e5b6548933f09630866f7dac154f95748a6071b50fed5ff5a92afcfbafa224c359247c0e3e708d102d7cb7d17f85ac06b1500d18333f96ab220d23ea84fad", 0x60, 0x2010091, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) unshare(0x22000600) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r6, 0x80044325, &(0x7f0000000100)) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) 3.324815047s ago: executing program 1 (id=2292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r1, 0x0, 0x20000000009, 0x0) 3.133250867s ago: executing program 0 (id=2293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa00180133070000000f0000bd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)='\vG\x00\x00\x00\x00\x00\x00', 0x8}, {&(0x7f0000000600)="75bbf8406512d05b5f0d20e228166f9c4e9e6b75da8277799171b2e9d52130d48e3dbf971bae26", 0x27}], 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000480)=""/32, 0x20}, {&(0x7f0000003980)=""/4103, 0x1007}], 0x2}, 0x2000}], 0x1, 0x60, 0x0) 3.110781065s ago: executing program 5 (id=2294): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) dup(0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd(0x6) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000640)={0x1, r2}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) fcntl$setstatus(r1, 0x4, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r3, 0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="22ad59cf628bad161b98897a39d3808e6521e94dd5fcd547896319acf7afaa98086d5fb64a8b70b3be141424e4701865b637835cb2be6d55254e1972a56d386c97cef3807910b853e942c8303f4915caa4bc92ab5da711cd401be88ec07e6a5e768ddf31ce7b891bef9a6c19fc6c7e139d9a4ff509a2a48c3c8b92ec4e0a9d481064386bcb1481690000", @ANYRES16=r6, @ANYBLOB="95a4000000000000000004000000080002000000000005000d0000000000"], 0x24}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c010000100013070000001200000000fffeffff000000000000faffe3ffffffe000000000000000000000000000e027a0963d1cf5e392a99000007c03ef958e83019df56677e74b7596287611fb7f3ec5c8630001001a362b97b4bf617a1c7e12945dd374fe39ee71129f3f34b1fe5babcda24d8c9df15d485a008147e05dbd4e3e51e7fdcf650b5a361345915077f55f13c7a9fb7d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000900)={0x5, 0x0, [{0x4, 0x83, &(0x7f0000000180)=""/131}, {0xd000, 0xab, &(0x7f00000007c0)=""/171}, {0x107000, 0xffb, &(0x7f0000003600)=""/4091}, {0x0, 0x1000, &(0x7f0000004600)=""/4096}, {0xf598e958273095a5, 0x55, &(0x7f0000000880)=""/85}]}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000002580)=""/107}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r3, 0x20, &(0x7f0000000400)={&(0x7f0000000240)=""/38, 0x26, 0x0, &(0x7f00000002c0)=""/18, 0x12}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020706500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x5c, 0x0, 0x0, 0x0}, 0x90) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.052841793s ago: executing program 0 (id=2295): syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f000000f680)='./file1\x00', 0x200012, &(0x7f0000000140)=ANY=[@ANYRES8], 0x1, 0xf62c, &(0x7f000000f6c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x0) 2.874128987s ago: executing program 4 (id=2296): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000100)=[@cred={{0x1c}}], 0x20}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 2.837974435s ago: executing program 4 (id=2297): r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0x40000006, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000002500)='keyring\x00', &(0x7f0000002200)={'syz', 0x3}, &(0x7f0000002540)='=\\\tz\x00\xde\xae\xa0:X_\xec\x13\xf1\x94\xf8\r\x8c\xf1\x9a\xdd\x12\xd1,\xa9\xc5\"%\xef k\xc2\xaf\xa5\x81p\xd3D\t\xaa\x1c\xa5l\xca\x8fz3x^\x00', 0x0) 2.412220607s ago: executing program 3 (id=2298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) unshare(0x20000400) unshare(0x0) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = socket(0x10, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0x3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000013c0)=0xc) sendmsg$netlink(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="249178f860c4000e368e3b0d965ab37aee00000076001f0300000008000000", @ANYRES32, @ANYBLOB="0c000d8008000300", @ANYRES32=r10, @ANYBLOB], 0x24}], 0x1}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) 1.760944473s ago: executing program 1 (id=2299): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES64=r2], 0x40}}, 0x0) 1.555959074s ago: executing program 4 (id=2300): syz_emit_vhci(0x0, 0x22) openat$uinput(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/102386, 0x18ff2}], 0x1, 0x400000, 0x81) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="2d9d7ab861bd4d304d57ab9f4ed1108b1c6e2a9dc73e476201"], 0xe3) socket$inet6(0xa, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRESOCT=r0], 0x1a) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000000c0)=0x1) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000001c0)=""/2) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r2 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) 1.365429957s ago: executing program 3 (id=2301): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000008500000033000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x2904c, 0x0, 0x10003}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={0x0}, 0x20) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0xe6, 0x0, &(0x7f0000000480)=""/230, 0xf3}, &(0x7f0000000340)=0x43) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010067656e6576650000280002801400070000000000000000000000000000000001060005000000000008000b4000007fff"], 0x58}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000480)}}], 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.055237356s ago: executing program 1 (id=2302): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) 983.767776ms ago: executing program 5 (id=2303): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x5c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e84cad483d2058fc"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="88df7aceebdb8d6266f5420d8707f034e7bf87f541a7234e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="499f28b2e1ea83e55723d70db3f0a2f5"}]}]}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0) 790.970659ms ago: executing program 5 (id=2304): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x84, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6a}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}]}]}}}, @IFLA_LINK={0x8}]}, 0x84}, 0x1, 0xba01}, 0x810) 638.836626ms ago: executing program 5 (id=2305): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2, 0x1, 0x3, 0x2104, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0x1d, 0xa, 0x0, 0xfffffffd}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @jmp]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0xfffffffffffffccc}, 0x2d) 580.061161ms ago: executing program 1 (id=2306): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000008500000033000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x2904c, 0x0, 0x10003}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={0x0}, 0x20) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/242, 0xe6, 0x0, &(0x7f0000000480)=""/230, 0xf3}, &(0x7f0000000340)=0x43) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010067656e6576650000280002801400070000000000000000000000000000000001060005000000000008000b4000007fff"], 0x58}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000480)}}], 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 506.162211ms ago: executing program 4 (id=2307): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa00180133070000000f0000bd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)="75bbf8406512d05b5f0d20e228166f9c4e9e6b75da8277799171b2e9d52130d48e3dbf971bae267f", 0x28}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000480)=""/32, 0x20}, {&(0x7f0000003980)=""/4103, 0x1007}], 0x2}, 0x2000}], 0x1, 0x60, 0x0) 399.304911ms ago: executing program 4 (id=2308): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x5c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e84cad483d2058fc"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="88df7aceebdb8d6266f5420d8707f034e7bf87f541a7234e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="499f28b2e1ea83e55723d70db3f0a2f5"}]}]}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0) 230.151717ms ago: executing program 0 (id=2309): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000100)=[@cred={{0x1c}}], 0x20}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 171.408714ms ago: executing program 2 (id=2310): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000300)=@in={0x2, 0x0, @local}, 0xb, &(0x7f00000004c0)=[{&(0x7f0000000000)=']', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="300000000000000084000000010000000000ecff0c00"/44, @ANYRESOCT], 0x30, 0x4000081}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x3, {0x1, 0x1, 0x4}, 0x2}, 0x18) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000dc0)="cc", 0x1}, {&(0x7f0000000140)="1a", 0x1}, {&(0x7f0000000700)="e6", 0x1}, {&(0x7f00000009c0)='A', 0x1}, {&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000ac0)='=', 0x1}, {&(0x7f0000000e00)="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", 0x201}], 0x7, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8bf527", 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x10010) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 170.432884ms ago: executing program 3 (id=2311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r1, 0x0, 0x20000000009, 0x0) 0s ago: executing program 4 (id=2312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010000304000000010000000000007400", @ANYRES32=r9, @ANYBLOB="00000000031201002c0012800b00010062726964676500001c000280050019000700000008000500010000000500170000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}], &(0x7f00000001c0)='syzkaller\x00', 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, 0x17, r5, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x10, 0x1d, 0xb06}, 0x10, 0x1bfc6, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[r0, r0, 0xffffffffffffffff, r2, r6], &(0x7f00000004c0)=[{0x3, 0x3, 0xc, 0x4}, {0x1, 0x4, 0x2}], 0x10, 0x34}, 0x90) sendmsg$TIPC_NL_NAME_TABLE_GET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r11) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x20000000000001b8, &(0x7f00000008c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0xffffffffffffffe0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.2.1624'. [ 421.426241][T10561] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 421.436393][T10561] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 421.744245][T10568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.264793][T10581] input: syz0 as /devices/virtual/input/input24 [ 422.571224][ T5153] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 422.573241][T10564] loop2: detected capacity change from 0 to 32768 [ 422.790216][ T5153] usb 1-1: Using ep0 maxpacket: 8 [ 422.818745][ T5153] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.846265][T10564] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 422.865967][ T5153] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 422.880284][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.896634][T10564] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 422.908717][ T5153] usb 1-1: config 0 descriptor?? [ 422.925108][ T5153] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 423.006193][T10564] bcachefs (loop2): alloc_read... done [ 423.027119][T10564] bcachefs (loop2): stripes_read... done [ 423.047015][T10564] bcachefs (loop2): snapshots_read... done [ 423.089162][T10564] bcachefs (loop2): journal_replay... done [ 423.111392][T10564] bcachefs (loop2): resume_logged_ops... done [ 423.132987][T10603] loop4: detected capacity change from 0 to 8 [ 423.144447][T10564] bcachefs (loop2): going read-write [ 423.164756][T10603] squashfs image failed sanity check [ 423.188405][T10564] bcachefs (loop2): done starting filesystem [ 423.319635][ T29] audit: type=1800 audit(1721311010.611:155): pid=10606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1625" name="bus" dev="loop2" ino=4100 res=0 errno=0 [ 423.467089][T10612] syzkaller1: entered promiscuous mode [ 423.508703][T10612] syzkaller1: entered allmulticast mode [ 423.591707][T10613] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1637'. [ 423.613705][T10613] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 423.654077][T10613] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 423.924001][ T9752] bcachefs (loop2): shutting down [ 423.929137][ T9752] bcachefs (loop2): going read-only [ 423.970403][ T9752] bcachefs (loop2): finished waiting for writes to stop [ 424.011116][ T9752] bcachefs (loop2): flushing journal and stopping allocators, journal seq 15 [ 424.077186][ T9752] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 18 [ 424.096950][T10620] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 424.103615][T10620] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 424.129308][T10620] vhci_hcd vhci_hcd.0: Device attached [ 424.139342][ T9752] bcachefs (loop2): shutdown complete, journal seq 19 [ 424.161815][ T9752] bcachefs (loop2): marking filesystem clean [ 424.202402][T10621] vhci_hcd: connection closed [ 424.211261][ T11] vhci_hcd: stop threads [ 424.248304][ T11] vhci_hcd: release socket [ 424.253887][ T11] vhci_hcd: disconnect device [ 424.330846][ T5153] gspca_vc032x: reg_r err -110 [ 424.342332][ T9752] bcachefs (loop2): shutdown complete [ 424.346082][ T5153] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 424.530307][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.556315][ T5153] usb 1-1: USB disconnect, device number 12 [ 424.568849][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.583612][T10639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.621398][T10636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.836874][T10647] input: syz0 as /devices/virtual/input/input25 [ 425.534030][T10653] loop4: detected capacity change from 0 to 8 [ 425.583574][T10653] squashfs image failed sanity check [ 425.766288][T10658] syzkaller1: entered promiscuous mode [ 425.821716][T10658] syzkaller1: entered allmulticast mode [ 426.140843][T10661] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1652'. [ 426.162165][T10661] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 426.182391][T10661] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 426.880330][ T5162] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 426.901597][T10691] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1664'. [ 427.012302][T10693] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 427.018980][T10693] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 427.028568][T10693] vhci_hcd vhci_hcd.0: Device attached [ 427.058629][T10694] vhci_hcd: connection closed [ 427.059094][ T12] vhci_hcd: stop threads [ 427.110229][ T5162] usb 6-1: Using ep0 maxpacket: 8 [ 427.130285][ T12] vhci_hcd: release socket [ 427.134768][ T12] vhci_hcd: disconnect device [ 427.172113][T10697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.215557][ T5162] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.257672][ T5162] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 427.296996][ T5162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.329703][ T5162] usb 6-1: config 0 descriptor?? [ 427.348573][ T5162] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 427.575432][T10684] loop4: detected capacity change from 0 to 32768 [ 427.584743][T10684] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1661 (10684) [ 427.636958][T10684] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 427.655085][T10684] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 427.667600][T10684] BTRFS info (device loop4): using free-space-tree [ 427.815093][T10717] loop0: detected capacity change from 0 to 8 [ 427.850258][T10717] squashfs image failed sanity check [ 428.191371][ T5096] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 428.215964][T10728] input: syz0 as /devices/virtual/input/input26 [ 428.235716][T10725] syzkaller1: entered promiscuous mode [ 428.254173][T10725] syzkaller1: entered allmulticast mode [ 428.441080][T10731] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1673'. [ 428.462661][T10731] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 428.489638][T10731] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 428.754078][T10740] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1677'. [ 428.780539][ T5162] gspca_vc032x: reg_r err -110 [ 428.801586][ T5162] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 429.297105][ T5162] usb 6-1: USB disconnect, device number 14 [ 429.394961][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 429.611732][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 429.622109][T10763] loop3: detected capacity change from 0 to 8 [ 429.643122][ T9] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 429.667227][T10763] squashfs image failed sanity check [ 429.706242][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.752227][ T9] usb 1-1: probing VID:PID(2201:012C) [ 429.778855][ T9] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 429.801521][ T9] vub300 1-1:32.0: probe with driver vub300 failed with error -22 [ 429.822037][T10759] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 429.828705][T10759] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 429.869341][T10768] vhci_hcd: connection closed [ 429.883526][T10759] vhci_hcd vhci_hcd.0: Device attached [ 429.904604][ T12] vhci_hcd: stop threads [ 429.916308][ T12] vhci_hcd: release socket [ 429.932711][ T12] vhci_hcd: disconnect device [ 430.013935][T10746] snd_virmidi snd_virmidi.0: control 0:0:0:syz1:0 is already present [ 430.069677][ T778] usb 1-1: USB disconnect, device number 13 [ 430.164103][T10775] syzkaller1: entered promiscuous mode [ 430.186530][T10775] syzkaller1: entered allmulticast mode [ 430.481523][T10783] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1692'. [ 430.845326][T10793] input: syz0 as /devices/virtual/input/input27 [ 431.134046][T10773] loop5: detected capacity change from 0 to 32768 [ 431.230724][T10773] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1688 (10773) [ 431.292889][T10773] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 431.316219][T10773] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 431.329549][T10773] BTRFS info (device loop5): using free-space-tree [ 431.394200][ T5112] Bluetooth: hci3: command 0x0406 tx timeout [ 431.429168][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 431.571290][ T5153] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 431.603809][T10826] syzkaller1: entered promiscuous mode [ 431.609346][T10826] syzkaller1: entered allmulticast mode [ 431.627145][ T8838] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 431.772660][ T5153] usb 1-1: Using ep0 maxpacket: 8 [ 431.785632][ T5153] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.827565][ T5153] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 431.872222][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.893762][ T5153] usb 1-1: config 0 descriptor?? [ 431.934261][ T5153] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 432.040358][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 432.430269][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 432.437834][ T9] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 432.450175][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.465482][ T9] usb 2-1: probing VID:PID(2201:012C) [ 432.481666][ T9] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 432.514315][ T9] vub300 2-1:32.0: probe with driver vub300 failed with error -22 [ 432.724669][T10845] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 432.731332][T10845] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 432.739515][T10845] vhci_hcd vhci_hcd.0: Device attached [ 432.755183][T10850] vhci_hcd: connection closed [ 432.755618][ T62] vhci_hcd: stop threads [ 432.790483][ T62] vhci_hcd: release socket [ 432.803224][ T62] vhci_hcd: disconnect device [ 432.857319][T10831] snd_virmidi snd_virmidi.0: control 0:0:0:syz1:0 is already present [ 432.908735][ T5166] usb 2-1: USB disconnect, device number 10 [ 433.154526][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1715'. [ 433.480750][ T5153] gspca_vc032x: reg_r err -110 [ 433.485672][ T5153] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 433.761458][ T5153] usb 1-1: USB disconnect, device number 14 [ 433.981046][T10870] syzkaller1: entered promiscuous mode [ 434.015693][T10870] syzkaller1: entered allmulticast mode [ 434.052253][T10876] input: syz0 as /devices/virtual/input/input28 [ 434.152279][T10872] loop1: detected capacity change from 0 to 32768 [ 434.282292][T10872] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 434.299991][T10872] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 434.346070][T10872] bcachefs (loop1): alloc_read... done [ 434.352186][T10872] bcachefs (loop1): stripes_read... done [ 434.358515][T10872] bcachefs (loop1): snapshots_read... done [ 434.368621][T10872] bcachefs (loop1): journal_replay... done [ 434.374618][T10872] bcachefs (loop1): resume_logged_ops... done [ 434.397400][T10872] bcachefs (loop1): going read-write [ 434.409499][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1729'. [ 434.423205][T10872] bcachefs (loop1): done starting filesystem [ 434.572834][ T29] audit: type=1800 audit(1721311021.831:156): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1721" name="bus" dev="loop1" ino=1073741825 res=0 errno=0 [ 435.085813][T10909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.119117][ T5095] bcachefs (loop1): shutting down [ 435.193697][ T5095] bcachefs (loop1): going read-only [ 435.212221][ T5095] bcachefs (loop1): finished waiting for writes to stop [ 435.254094][ T5204] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 435.278363][T10913] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 435.285024][T10913] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 435.295312][T10913] vhci_hcd vhci_hcd.0: Device attached [ 435.310217][T10914] vhci_hcd: connection closed [ 435.311729][ T62] vhci_hcd: stop threads [ 435.339468][ T62] vhci_hcd: release socket [ 435.345480][ T5095] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 435.358241][ T62] vhci_hcd: disconnect device [ 435.375685][ T5095] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [ 435.389254][ T5095] bcachefs (loop1): shutdown complete, journal seq 14 [ 435.401485][ T5095] bcachefs (loop1): marking filesystem clean [ 435.613708][ T5204] usb 3-1: Using ep0 maxpacket: 32 [ 435.638971][ T5204] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 435.639167][ T5095] bcachefs (loop1): shutdown complete [ 435.658848][ T5204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.680548][ T5153] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 435.689811][ T5204] usb 3-1: probing VID:PID(2201:012C) [ 435.708807][ T5204] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 435.752585][ T5204] vub300 3-1:32.0: probe with driver vub300 failed with error -22 [ 435.890772][ T5153] usb 6-1: Using ep0 maxpacket: 8 [ 435.909808][ T5153] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.930271][ T5153] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 435.939530][ T5153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.973041][T10903] snd_virmidi snd_virmidi.0: control 0:0:0:syz1:0 is already present [ 435.973404][ T5153] usb 6-1: config 0 descriptor?? [ 435.996943][ T5153] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 436.030190][ T5204] usb 3-1: USB disconnect, device number 13 [ 436.086590][T10926] loop4: detected capacity change from 0 to 256 [ 436.108893][T10926] exfat: Bad value for 'errors' [ 436.925772][T10937] syzkaller1: entered promiscuous mode [ 436.989464][T10937] syzkaller1: entered allmulticast mode [ 437.078522][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'. [ 437.407742][T10947] input: syz0 as /devices/virtual/input/input29 [ 437.827438][T10958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.841896][T10954] loop1: detected capacity change from 0 to 32768 [ 437.850472][ T5153] gspca_vc032x: reg_r err -71 [ 437.855262][ T5153] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 437.871533][ T5153] usb 6-1: USB disconnect, device number 15 [ 437.980247][T10954] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 437.998386][T10954] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 438.031255][T10954] bcachefs (loop1): alloc_read... done [ 438.036892][T10954] bcachefs (loop1): stripes_read... done [ 438.044275][T10954] bcachefs (loop1): snapshots_read... done [ 438.053413][T10954] bcachefs (loop1): journal_replay... done [ 438.059315][T10954] bcachefs (loop1): resume_logged_ops... done [ 438.066908][T10954] bcachefs (loop1): going read-write [ 438.080396][T10954] bcachefs (loop1): done starting filesystem [ 438.443731][ T29] audit: type=1800 audit(1721311025.551:157): pid=10978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1749" name="bus" dev="loop1" ino=1073741825 res=0 errno=0 [ 438.604018][T10981] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 438.610663][T10981] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 438.621817][T10981] vhci_hcd vhci_hcd.0: Device attached [ 438.690240][T10982] vhci_hcd: connection closed [ 438.693774][ T12] vhci_hcd: stop threads [ 438.729929][ T12] vhci_hcd: release socket [ 438.787603][ T12] vhci_hcd: disconnect device [ 438.852074][ T5095] bcachefs (loop1): shutting down [ 438.868609][ T5095] bcachefs (loop1): going read-only [ 438.910290][ T5095] bcachefs (loop1): finished waiting for writes to stop [ 438.941413][ T5095] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 438.968076][ T5095] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 439.004353][ T5095] bcachefs (loop1): shutdown complete, journal seq 12 [ 439.019911][ T5095] bcachefs (loop1): marking filesystem clean [ 439.040604][T10980] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 439.047162][T10980] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 439.064446][T10980] vhci_hcd vhci_hcd.0: Device attached [ 439.118229][T10986] vhci_hcd: connection closed [ 439.134889][ T5095] bcachefs (loop1): shutdown complete [ 439.182389][ T62] vhci_hcd: stop threads [ 439.191984][T10993] loop3: detected capacity change from 0 to 8 [ 439.196939][ T62] vhci_hcd: release socket [ 439.207174][ T62] vhci_hcd: disconnect device [ 439.241242][T10993] squashfs image failed sanity check [ 439.555617][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.562349][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.642646][ T5160] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 439.842267][ T5160] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 439.880770][ T5160] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 439.893390][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 439.918076][ T5160] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 439.945344][ T5160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.990079][T11004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.993679][T10979] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.145735][T11004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.605115][T11018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.865457][T11020] loop4: detected capacity change from 0 to 32768 [ 440.947116][T11020] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 440.964172][T11020] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 440.999162][T11020] bcachefs (loop4): alloc_read... done [ 441.004880][T11020] bcachefs (loop4): stripes_read... done [ 441.011214][T11020] bcachefs (loop4): snapshots_read... done [ 441.020364][T11020] bcachefs (loop4): journal_replay... done [ 441.026258][T11020] bcachefs (loop4): resume_logged_ops... done [ 441.039397][T11020] bcachefs (loop4): going read-write [ 441.053085][T11020] bcachefs (loop4): done starting filesystem [ 441.150620][ T29] audit: type=1800 audit(1721311028.451:158): pid=11034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1768" name="bus" dev="loop4" ino=1073741825 res=0 errno=0 [ 441.580857][ T5162] usb 6-1: USB disconnect, device number 16 [ 441.676420][T11035] loop1: detected capacity change from 0 to 256 [ 441.720042][ T5096] bcachefs (loop4): shutting down [ 441.737883][ T5096] bcachefs (loop4): going read-only [ 441.768138][ T5096] bcachefs (loop4): finished waiting for writes to stop [ 441.784630][T11035] exfat: Bad value for 'errors' [ 441.803641][ T5096] bcachefs (loop4): flushing journal and stopping allocators, journal seq 9 [ 441.838658][ T5096] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 441.871303][T11042] loop5: detected capacity change from 0 to 8 [ 441.888707][ T5096] bcachefs (loop4): shutdown complete, journal seq 11 [ 441.911570][T11042] squashfs image failed sanity check [ 441.918363][ T5096] bcachefs (loop4): marking filesystem clean [ 442.039815][ T5096] bcachefs (loop4): shutdown complete [ 442.280065][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1775'. [ 442.784985][T11067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.849052][T11071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.955163][T11071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.039149][T11077] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 443.045717][T11077] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 443.066188][T11077] vhci_hcd vhci_hcd.0: Device attached [ 443.073720][T11078] vhci_hcd: connection closed [ 443.075695][ T12] vhci_hcd: stop threads [ 443.087304][ T12] vhci_hcd: release socket [ 443.096322][ T12] vhci_hcd: disconnect device [ 443.184382][T11081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1785'. [ 443.400358][ T5153] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 443.612110][ T5153] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 443.623494][T11084] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 443.630124][T11084] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 443.639039][ T5153] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 443.659527][ T5153] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 443.670569][T11084] vhci_hcd vhci_hcd.0: Device attached [ 443.675069][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.711822][T11072] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 443.720673][T11091] loop2: detected capacity change from 0 to 256 [ 443.748894][T11091] exfat: Bad value for 'errors' [ 443.761982][T11088] vhci_hcd: connection closed [ 443.762312][ T52] vhci_hcd: stop threads [ 443.788562][ T52] vhci_hcd: release socket [ 443.798735][ T52] vhci_hcd: disconnect device [ 444.201437][T11099] loop0: detected capacity change from 0 to 8 [ 444.248411][T11099] squashfs image failed sanity check [ 444.472421][T11102] syzkaller1: entered promiscuous mode [ 444.478156][T11102] syzkaller1: entered allmulticast mode [ 445.046012][T11117] loop2: detected capacity change from 0 to 1024 [ 445.072481][T11117] EXT4-fs: Ignoring removed orlov option [ 445.094586][T11117] EXT4-fs: Ignoring removed nomblk_io_submit option [ 445.189740][T11117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.520578][ T29] audit: type=1804 audit(1721311032.821:159): pid=11117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1795" name="/newroot/48/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 445.677615][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1795'. [ 445.706444][T11134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.724425][T11117] team_slave_0: entered promiscuous mode [ 445.730717][T11117] team_slave_1: entered promiscuous mode [ 445.786877][T11134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.787427][T11117] macvtap1: entered promiscuous mode [ 445.850252][T11117] team0: entered promiscuous mode [ 445.886700][ T5162] usb 2-1: USB disconnect, device number 11 [ 445.911903][T11117] macvtap1: entered allmulticast mode [ 445.970250][T11117] team0: entered allmulticast mode [ 445.983142][T11117] team_slave_0: entered allmulticast mode [ 446.028191][T11117] team_slave_1: entered allmulticast mode [ 446.067256][T11117] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 446.168399][ T9752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.194052][T11144] loop1: detected capacity change from 0 to 8 [ 446.210269][T11144] squashfs image failed sanity check [ 446.313909][T11146] syzkaller1: entered promiscuous mode [ 446.322069][T11146] syzkaller1: entered allmulticast mode [ 446.401537][T11150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.491658][ T778] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 446.552788][T11156] loop2: detected capacity change from 0 to 512 [ 446.564835][T11156] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 446.581833][T11156] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz.2.1809: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 446.614479][T11156] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1809: couldn't read orphan inode 15 (err -117) [ 446.628496][T11156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.642247][T11156] ext2 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.657604][ T29] audit: type=1800 audit(1721311033.961:160): pid=11156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1809" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 446.693945][ T778] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 446.713230][ T778] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 446.727826][ T778] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 446.739243][ T778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.753947][T11143] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 446.805076][ T9752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.195075][T11165] loop3: detected capacity change from 0 to 32768 [ 447.574667][T11165] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 447.591937][T11165] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 447.658581][T11165] bcachefs (loop3): alloc_read... done [ 447.664243][T11165] bcachefs (loop3): stripes_read... done [ 447.671026][T11165] bcachefs (loop3): snapshots_read... done [ 447.679846][T11165] bcachefs (loop3): journal_replay... done [ 447.686347][T11165] bcachefs (loop3): resume_logged_ops... done [ 447.702919][T11165] bcachefs (loop3): going read-write [ 447.716762][T11165] bcachefs (loop3): done starting filesystem [ 447.812612][ T29] audit: type=1800 audit(1721311035.111:161): pid=11190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1814" name="bus" dev="loop3" ino=1073741825 res=0 errno=0 [ 448.160640][T11194] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 448.167216][T11194] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 448.210919][T11198] vhci_hcd: connection closed [ 448.211073][T11194] vhci_hcd vhci_hcd.0: Device attached [ 448.243719][T11203] loop1: detected capacity change from 0 to 8 [ 448.252943][ T5114] bcachefs (loop3): shutting down [ 448.258188][ T5114] bcachefs (loop3): going read-only [ 448.268304][ T5114] bcachefs (loop3): finished waiting for writes to stop [ 448.278099][T11203] squashfs image failed sanity check [ 448.356060][ T5114] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 448.368840][ T52] vhci_hcd: stop threads [ 448.391760][ T52] vhci_hcd: release socket [ 448.403972][ T5114] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 448.416596][ T52] vhci_hcd: disconnect device [ 448.426395][ T5114] bcachefs (loop3): shutdown complete, journal seq 14 [ 448.434203][ T5114] bcachefs (loop3): marking filesystem clean [ 448.511868][ T5153] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 448.566409][ T5114] bcachefs (loop3): shutdown complete [ 448.702303][ T5153] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 448.723779][ T5153] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 448.750188][ T5153] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 448.789847][ T5153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.823642][T11200] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 448.950198][T11215] tipc: Failed to remove unknown binding: 66,1,1/0:4006120900/4006120902 [ 449.166023][ T5162] usb 1-1: USB disconnect, device number 15 [ 449.288843][ T5204] usb 6-1: USB disconnect, device number 17 [ 449.384096][T11221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.519888][T11221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.695607][T11228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.004519][T11236] syzkaller1: entered promiscuous mode [ 450.017181][T11236] syzkaller1: entered allmulticast mode [ 450.391713][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1834'. [ 450.912999][T11245] loop5: detected capacity change from 0 to 8 [ 450.951018][T11245] squashfs image failed sanity check [ 451.092189][T11254] tipc: Failed to remove unknown binding: 66,1,1/0:4029289464/4029289466 [ 451.773878][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 451.884108][T11288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.959893][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 452.752259][T11298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.796187][T11291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.819291][T11301] loop2: detected capacity change from 0 to 8 [ 452.841248][T11301] squashfs image failed sanity check [ 453.119905][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1857'. [ 454.489501][T11336] loop2: detected capacity change from 0 to 40427 [ 454.501853][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1867'. [ 454.564949][T11336] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 454.572966][T11336] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 454.659680][T11336] F2FS-fs (loop2): Found nat_bits in checkpoint [ 454.774660][T11336] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 454.781886][T11336] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 455.151044][T11343] syz.2.1869: attempt to access beyond end of device [ 455.151044][T11343] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 455.178983][ T29] audit: type=1804 audit(1721311042.471:162): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1869" name="/newroot/66/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 455.496468][T11348] loop3: detected capacity change from 0 to 512 [ 455.519323][T11353] loop5: detected capacity change from 0 to 8 [ 455.556746][T11353] squashfs image failed sanity check [ 455.562470][T11348] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 455.622769][T11348] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.1871: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 455.756606][T11348] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1871: couldn't read orphan inode 15 (err -117) [ 455.796843][T11357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.852012][T11348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.936604][T11348] ext2 filesystem being mounted at /334/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.027306][ T29] audit: type=1800 audit(1721311043.331:163): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1871" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 456.268710][ T5114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.378705][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 458.467523][T11406] loop0: detected capacity change from 0 to 8 [ 458.499829][T11406] squashfs image failed sanity check [ 458.587366][T11408] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 458.594044][T11408] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 458.650362][T11408] vhci_hcd vhci_hcd.0: Device attached [ 458.655968][T11409] vhci_hcd: connection closed [ 458.668903][ T6529] vhci_hcd: stop threads [ 458.708876][T11412] loop1: detected capacity change from 0 to 512 [ 458.710328][ T6529] vhci_hcd: release socket [ 458.725402][ T6529] vhci_hcd: disconnect device [ 458.742035][T11412] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 458.821279][T11412] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.1892: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 458.870785][T11412] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1892: couldn't read orphan inode 15 (err -117) [ 458.896170][T11422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.920215][ T5153] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 458.977105][T11412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.040610][T11412] ext2 filesystem being mounted at /349/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.084277][ T29] audit: type=1800 audit(1721311046.391:164): pid=11412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1892" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 459.119514][ T5153] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 459.161298][ T5153] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 459.182211][ T5153] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 459.192163][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.204194][T11389] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 459.258532][ T5095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.414301][T11414] loop4: detected capacity change from 0 to 32768 [ 459.741693][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 460.523869][T11414] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 460.760024][T11414] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 460.846177][T11414] bcachefs (loop4): alloc_read... done [ 460.858947][T11414] bcachefs (loop4): stripes_read... done [ 460.872946][T11414] bcachefs (loop4): snapshots_read... done [ 460.923863][T11414] bcachefs (loop4): journal_replay... done [ 460.947131][T11414] bcachefs (loop4): resume_logged_ops... done [ 460.971480][T11414] bcachefs (loop4): going read-write [ 460.986961][T11452] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1901'. [ 461.041495][T11414] bcachefs (loop4): done starting filesystem [ 461.219280][ T29] audit: type=1800 audit(1721311048.521:165): pid=11460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1894" name="bus" dev="loop4" ino=1073741825 res=0 errno=0 [ 461.750938][ T5096] bcachefs (loop4): shutting down [ 461.764578][ T9] usb 4-1: USB disconnect, device number 16 [ 461.810848][ T5096] bcachefs (loop4): going read-only [ 461.816182][ T5096] bcachefs (loop4): finished waiting for writes to stop [ 461.962992][ T5096] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 462.032603][ T5096] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 462.120535][ T5096] bcachefs (loop4): shutdown complete, journal seq 15 [ 462.234692][ T5096] bcachefs (loop4): marking filesystem clean [ 462.343005][ T5096] bcachefs (loop4): shutdown complete [ 462.449499][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1911'. [ 462.744391][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 463.440415][ T5153] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 463.660374][ T5153] usb 6-1: Using ep0 maxpacket: 32 [ 463.690307][ T5153] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 463.721372][ T5153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.785568][ T5153] usb 6-1: probing VID:PID(2201:012C) [ 463.809545][T11486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.811420][ T5153] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 463.898896][ T5153] vub300 6-1:32.0: probe with driver vub300 failed with error -22 [ 464.089114][ T5153] usb 6-1: USB disconnect, device number 18 [ 465.279234][T11516] loop4: detected capacity change from 0 to 8 [ 465.316732][T11516] squashfs image failed sanity check [ 465.702359][T11519] loop0: detected capacity change from 0 to 32768 [ 465.900743][T11519] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 465.917665][T11519] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 466.013431][T11505] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 466.020072][T11505] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 466.035117][T11497] loop2: detected capacity change from 0 to 32768 [ 466.042667][T11519] bcachefs (loop0): alloc_read... done [ 466.048204][T11519] bcachefs (loop0): stripes_read... done [ 466.053962][T11519] bcachefs (loop0): snapshots_read... done [ 466.062209][T11519] bcachefs (loop0): journal_replay... done [ 466.068059][T11519] bcachefs (loop0): resume_logged_ops... done [ 466.074713][T11505] vhci_hcd vhci_hcd.0: Device attached [ 466.085785][T11519] bcachefs (loop0): going read-write [ 466.091172][T11534] vhci_hcd: connection closed [ 466.095556][T11536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.116034][ T52] vhci_hcd: stop threads [ 466.129260][T11519] bcachefs (loop0): done starting filesystem [ 466.135532][ T52] vhci_hcd: release socket [ 466.163959][ T52] vhci_hcd: disconnect device [ 466.569015][ T29] audit: type=1800 audit(1721311053.521:166): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1926" name="bus" dev="loop0" ino=1073741825 res=0 errno=0 [ 466.740674][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 466.855620][ T5094] bcachefs (loop0): shutting down [ 466.871749][T11497] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 466.882986][ T5094] bcachefs (loop0): going read-only [ 466.888225][ T5094] bcachefs (loop0): finished waiting for writes to stop [ 466.891391][T11497] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 466.906340][T11536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.960542][ T5094] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 466.978027][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 466.993358][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 467.015308][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.040639][ T5094] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 467.112452][ T5094] bcachefs (loop0): shutdown complete, journal seq 13 [ 467.119522][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.151228][ T5094] bcachefs (loop0): marking filesystem clean [ 467.183235][T11513] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 467.251831][T11497] bcachefs: bch2_mount() error: EINVAL [ 467.321858][ T5094] bcachefs (loop0): shutdown complete [ 468.131657][T11560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.211806][T11561] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1933'. [ 468.672420][ T9] usb 4-1: USB disconnect, device number 17 [ 469.251195][T11583] loop4: detected capacity change from 0 to 1024 [ 469.282703][T11583] EXT4-fs: Ignoring removed orlov option [ 469.308297][T11583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 469.329150][T11585] loop3: detected capacity change from 0 to 8 [ 469.385974][T11585] squashfs image failed sanity check [ 469.477390][T11583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.859019][ T29] audit: type=1804 audit(1721311057.161:167): pid=11598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1943" name="/newroot/308/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 470.032213][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1943'. [ 470.360643][T11598] team_slave_0: entered promiscuous mode [ 470.366388][T11598] team_slave_1: entered promiscuous mode [ 470.416489][T11598] macvtap2: entered promiscuous mode [ 470.478403][T11598] team0: entered promiscuous mode [ 470.531022][T11598] macvtap2: entered allmulticast mode [ 470.580693][T11598] team0: entered allmulticast mode [ 470.620350][T11598] team_slave_0: entered allmulticast mode [ 470.645086][T11598] team_slave_1: entered allmulticast mode [ 470.681737][T11598] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 470.777961][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1943'. [ 470.820838][T11604] team0: left allmulticast mode [ 470.846193][T11604] team_slave_0: left allmulticast mode [ 470.860277][T11604] team_slave_1: left allmulticast mode [ 470.865984][T11604] team0: left promiscuous mode [ 470.874098][T11604] team_slave_0: left promiscuous mode [ 470.879534][T11604] team_slave_1: left promiscuous mode [ 470.945958][T11604] macvtap2: left promiscuous mode [ 470.955107][T11604] macvtap2: left allmulticast mode [ 471.108464][ T5096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.466627][T11587] loop2: detected capacity change from 0 to 32768 [ 471.798728][T11587] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 471.856619][T11587] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 471.864886][T11628] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 471.871524][T11628] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 471.882257][T11628] vhci_hcd vhci_hcd.0: Device attached [ 471.927422][T11587] bcachefs (loop2): alloc_read... done [ 471.946276][T11587] bcachefs (loop2): stripes_read... done [ 471.956960][T11587] bcachefs (loop2): snapshots_read... done [ 471.984948][T11587] bcachefs (loop2): journal_replay... done [ 471.994281][T11629] vhci_hcd: connection closed [ 471.996657][ T984] vhci_hcd: stop threads [ 472.013380][T11587] bcachefs (loop2): resume_logged_ops... done [ 472.020500][ T984] vhci_hcd: release socket [ 472.032137][ T984] vhci_hcd: disconnect device [ 472.042209][T11587] bcachefs (loop2): going read-write [ 472.260581][T11587] bcachefs (loop2): done starting filesystem [ 473.285905][ T29] audit: type=1800 audit(1721311060.591:168): pid=11587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1944" name="bus" dev="loop2" ino=4100 res=0 errno=0 [ 473.427621][ T9752] bcachefs (loop2): shutting down [ 473.433243][ T9752] bcachefs (loop2): going read-only [ 473.441599][ T9752] bcachefs (loop2): finished waiting for writes to stop [ 473.455878][ T9752] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 473.497156][ T9752] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 9 [ 473.520226][ T5204] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 473.540173][ T9752] bcachefs (loop2): shutdown complete, journal seq 10 [ 473.547892][ T9752] bcachefs (loop2): marking filesystem clean [ 473.660554][ T9752] bcachefs (loop2): shutdown complete [ 473.761444][ T5204] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 473.780503][ T5204] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 473.798067][ T5204] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 473.818821][ T5204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.833678][T11624] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 474.050394][T11656] loop3: detected capacity change from 0 to 8 [ 474.168052][T11656] squashfs image failed sanity check [ 474.510615][T11664] loop0: detected capacity change from 0 to 1024 [ 474.532447][T11664] EXT4-fs: Ignoring removed orlov option [ 474.561401][T11664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 474.619020][T11664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.983248][T11679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.871067][ T29] audit: type=1804 audit(1721311063.141:169): pid=11681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1963" name="/newroot/355/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 476.060599][ T5153] usb 6-1: USB disconnect, device number 19 [ 476.099607][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 476.220561][T11681] team_slave_0: entered promiscuous mode [ 476.226282][T11681] team_slave_1: entered promiscuous mode [ 476.260652][T11681] macvtap2: entered promiscuous mode [ 476.266037][T11681] team0: entered promiscuous mode [ 476.300811][T11681] macvtap2: entered allmulticast mode [ 476.306245][T11681] team0: entered allmulticast mode [ 476.336220][T11681] team_slave_0: entered allmulticast mode [ 476.354797][T11681] team_slave_1: entered allmulticast mode [ 476.375912][T11681] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 476.399742][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 476.520709][T11686] team0: left allmulticast mode [ 476.530374][T11686] team_slave_0: left allmulticast mode [ 476.570195][T11686] team_slave_1: left allmulticast mode [ 476.596172][T11686] team0: left promiscuous mode [ 476.617135][T11686] team_slave_0: left promiscuous mode [ 476.622931][T11686] team_slave_1: left promiscuous mode [ 476.707068][T11686] macvtap2: left promiscuous mode [ 476.712235][T11686] macvtap2: left allmulticast mode [ 476.820009][ T5094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.949809][T11683] loop3: detected capacity change from 0 to 32768 [ 477.301051][T11683] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 477.324779][T11683] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 477.434689][T11683] bcachefs (loop3): alloc_read... done [ 477.458111][T11683] bcachefs (loop3): stripes_read... done [ 477.471081][T11683] bcachefs (loop3): snapshots_read... done [ 477.493681][T11722] loop1: detected capacity change from 0 to 8 [ 477.512477][T11683] bcachefs (loop3): journal_replay... done [ 477.533426][T11722] squashfs image failed sanity check [ 477.540210][T11683] bcachefs (loop3): resume_logged_ops... done [ 477.567090][T11683] bcachefs (loop3): going read-write [ 477.601917][T11683] bcachefs (loop3): done starting filesystem [ 477.762129][ T29] audit: type=1800 audit(1721311065.071:170): pid=11727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1967" name="bus" dev="loop3" ino=1073741825 res=0 errno=0 [ 478.136304][ T5114] bcachefs (loop3): shutting down [ 478.165280][ T5114] bcachefs (loop3): going read-only [ 478.183031][ T5114] bcachefs (loop3): finished waiting for writes to stop [ 478.215073][T11737] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1981'. [ 478.244837][T11737] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1981'. [ 478.293501][ T5114] bcachefs (loop3): flushing journal and stopping allocators, journal seq 19 [ 478.296517][T11740] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 478.344806][ T5114] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 20 [ 478.376042][ T5114] bcachefs (loop3): shutdown complete, journal seq 21 [ 478.383849][ T5114] bcachefs (loop3): marking filesystem clean [ 478.622835][ T5114] bcachefs (loop3): shutdown complete [ 478.660808][T11738] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 478.667432][T11738] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 478.690695][T11748] vhci_hcd: connection closed [ 478.702021][T11741] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 478.713339][T11741] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 478.742085][T11741] vhci_hcd vhci_hcd.0: Device attached [ 478.750391][ T5160] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 478.759607][T11738] vhci_hcd vhci_hcd.0: Device attached [ 478.781563][T11750] vhci_hcd: connection closed [ 478.809208][ T1102] vhci_hcd: stop threads [ 478.826111][ T1102] vhci_hcd: release socket [ 478.852839][ T1102] vhci_hcd: disconnect device [ 478.895099][ T1102] vhci_hcd: stop threads [ 478.914354][T11754] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1985'. [ 478.920690][ T1102] vhci_hcd: release socket [ 478.940453][T11754] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1985'. [ 478.960161][ T5160] usb 1-1: Using ep0 maxpacket: 16 [ 478.971666][T11755] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 478.985178][ T1102] vhci_hcd: disconnect device [ 479.001026][ T5164] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 479.008920][ T5160] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 479.094529][T11755] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 38320 - 0 [ 479.120713][ T5162] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 479.142647][ T5160] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 479.152638][T11755] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 38320 - 0 [ 479.205789][T11755] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 38320 - 0 [ 479.213576][ T5160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.213689][ T5164] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 479.257848][T11755] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 38320 - 0 [ 479.293367][T11755] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 40527 - 0 [ 479.345143][ T5164] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 479.355306][ T5164] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 479.361638][ T5160] usb 1-1: config 0 descriptor?? [ 479.367292][ T5164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.396452][T11742] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 479.397657][T11755] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 40527 - 0 [ 479.415818][ T5162] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 479.468749][ T5162] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 479.493026][ T5162] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 479.495553][T11760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.502236][T11755] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 40527 - 0 [ 479.502281][T11755] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 40527 - 0 [ 479.530995][ T5162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.545272][T11741] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 479.562884][T11755] geneve2: entered promiscuous mode [ 479.568159][T11755] geneve2: entered allmulticast mode [ 479.640406][T11757] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 479.852277][T11757] usb 6-1: Using ep0 maxpacket: 16 [ 479.862619][T11757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 479.882172][T11737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.900660][T11737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.911953][T11757] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 479.940172][T11757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.951753][ T5160] hid (null): nested delimiters [ 479.956665][ T5160] hid (null): nested delimiters [ 479.975153][T11757] usb 6-1: config 0 descriptor?? [ 479.982010][ T5160] hid (null): nested delimiters [ 479.991617][ T5160] hid (null): report_id 24797 is invalid [ 479.997763][ T5160] hid (null): bogus close delimiter [ 480.004294][ T5160] hid (null): unknown global tag 0x83 [ 480.009906][ T5160] hid (null): unknown global tag 0xc [ 480.021278][ T5160] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1 [ 480.029755][ T5160] hid-generic 0003:0158:0100.000E: unexpected long global item [ 480.056474][ T5160] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22 [ 480.165305][ T5164] usb 1-1: USB disconnect, device number 16 [ 480.434010][T11754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.462741][T11754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.480721][T11757] hid (null): nested delimiters [ 480.499619][T11757] hid (null): nested delimiters [ 480.508236][T11757] hid (null): nested delimiters [ 480.522732][T11757] hid (null): report_id 24797 is invalid [ 480.528763][T11757] hid (null): bogus close delimiter [ 480.534440][T11757] hid (null): unknown global tag 0x83 [ 480.540916][T11757] hid (null): unknown global tag 0xc [ 480.559347][T11757] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1 [ 480.571680][T11757] hid-generic 0003:0158:0100.000F: unexpected long global item [ 480.798040][T11774] loop4: detected capacity change from 0 to 32768 [ 480.833409][T11757] hid-generic 0003:0158:0100.000F: probe with driver hid-generic failed with error -22 [ 480.901012][T11774] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 480.918108][T11774] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 480.956798][T11774] bcachefs (loop4): alloc_read... done [ 480.962430][T11774] bcachefs (loop4): stripes_read... done [ 480.968240][T11774] bcachefs (loop4): snapshots_read... done [ 480.976653][T11774] bcachefs (loop4): journal_replay... done [ 480.982732][T11774] bcachefs (loop4): resume_logged_ops... done [ 480.990968][T11774] bcachefs (loop4): going read-write [ 480.999653][T11774] bcachefs (loop4): done starting filesystem [ 481.104076][ T29] audit: type=1800 audit(1721311068.381:171): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1990" name="bus" dev="loop4" ino=1073741825 res=0 errno=0 [ 481.216117][T11757] usb 6-1: USB disconnect, device number 20 [ 481.559556][ T5160] usb 2-1: USB disconnect, device number 12 [ 481.621890][ T5096] bcachefs (loop4): shutting down [ 481.627890][ T5096] bcachefs (loop4): going read-only [ 481.642477][ T5162] usb 3-1: USB disconnect, device number 14 [ 481.662458][ T5096] bcachefs (loop4): finished waiting for writes to stop [ 481.724460][ T5096] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 481.766775][T11788] loop0: detected capacity change from 0 to 8 [ 481.783320][ T5096] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 481.841005][T11788] squashfs image failed sanity check [ 481.849952][ T5096] bcachefs (loop4): shutdown complete, journal seq 12 [ 481.892547][ T5096] bcachefs (loop4): marking filesystem clean [ 482.062865][ T5096] bcachefs (loop4): shutdown complete [ 482.717702][T11811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.394186][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2004'. [ 483.809334][T11829] loop3: detected capacity change from 0 to 512 [ 483.861032][T11829] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 483.932197][T11829] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.2005: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 484.097699][T11829] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.2005: couldn't read orphan inode 15 (err -117) [ 484.176583][T11829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.250542][T11829] ext2 filesystem being mounted at /355/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.314643][ T29] audit: type=1800 audit(1721311071.621:172): pid=11829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2005" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 484.627502][T11847] loop0: detected capacity change from 0 to 8 [ 484.665087][T11847] squashfs image failed sanity check [ 485.309281][ T5114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.431653][T11862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2014'. [ 485.460219][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 485.812182][T11883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.107007][T11884] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 486.113744][T11884] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 486.122414][T11884] vhci_hcd vhci_hcd.0: Device attached [ 486.196877][T11887] vhci_hcd: connection closed [ 486.206485][ T11] vhci_hcd: stop threads [ 486.228425][ T11] vhci_hcd: release socket [ 486.236595][ T11] vhci_hcd: disconnect device [ 486.521205][ T5153] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 487.122494][ T5153] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 487.146251][ T5153] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 487.180740][ T5153] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 487.219961][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.265999][T11869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 487.646376][T11908] loop4: detected capacity change from 0 to 8 [ 487.666699][T11908] squashfs image failed sanity check [ 487.737804][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2024'. [ 491.027766][ T5204] usb 1-1: USB disconnect, device number 17 [ 491.032198][T11911] loop2: detected capacity change from 0 to 32768 [ 491.085396][T11911] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2027 (11911) [ 491.132413][T11911] BTRFS error (device loop2): open_ctree failed [ 491.991210][T11959] loop3: detected capacity change from 0 to 8 [ 492.063489][T11959] squashfs image failed sanity check [ 492.614465][T11972] syz_tun: entered promiscuous mode [ 492.689008][T11972] syz_tun: left promiscuous mode [ 493.504481][T11982] loop0: detected capacity change from 0 to 32768 [ 493.696259][T11982] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 493.713134][T11982] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 493.821293][T11982] bcachefs (loop0): alloc_read... done [ 493.826905][T11982] bcachefs (loop0): stripes_read... done [ 493.832705][T11982] bcachefs (loop0): snapshots_read... done [ 493.841882][T11982] bcachefs (loop0): journal_replay... done [ 493.849314][T11982] bcachefs (loop0): resume_logged_ops... done [ 493.873829][T11982] bcachefs (loop0): going read-write [ 493.894305][T11982] bcachefs (loop0): done starting filesystem [ 494.034789][ T29] audit: type=1800 audit(1721311081.321:173): pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2051" name="bus" dev="loop0" ino=1073741825 res=0 errno=0 [ 494.432295][ T5094] bcachefs (loop0): shutting down [ 494.437370][ T5094] bcachefs (loop0): going read-only [ 494.451501][ T5094] bcachefs (loop0): finished waiting for writes to stop [ 494.477912][ T5094] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 494.548242][ T5094] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 494.583214][ T5094] bcachefs (loop0): shutdown complete, journal seq 13 [ 494.641030][ T5094] bcachefs (loop0): marking filesystem clean [ 494.817302][ T5094] bcachefs (loop0): shutdown complete [ 494.932233][T11984] loop4: detected capacity change from 0 to 32768 [ 495.022060][T11984] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2050 (11984) [ 495.084000][T11984] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 495.100901][T12019] loop3: detected capacity change from 0 to 8 [ 495.122917][T11984] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 495.156098][T11984] BTRFS info (device loop4): using free-space-tree [ 495.193724][T12019] squashfs image failed sanity check [ 495.428854][T12039] loop5: detected capacity change from 0 to 512 [ 495.448224][T12039] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 495.567870][ T5096] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 495.578604][ T5164] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 495.583553][T12039] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #15: comm syz.5.2062: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 495.591645][T12041] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 495.619296][T12039] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.2062: couldn't read orphan inode 15 (err -117) [ 495.639161][T12039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.662232][T12039] ext2 filesystem being mounted at /133/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.699569][ T29] audit: type=1800 audit(1721311083.001:174): pid=12039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2062" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 495.811496][ T5164] usb 2-1: Using ep0 maxpacket: 32 [ 495.827332][ T5164] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 495.869330][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.916062][ T5164] usb 2-1: probing VID:PID(2201:012C) [ 495.963330][ T5164] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 496.034462][ T8838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.038329][ T5164] vub300 2-1:32.0: probe with driver vub300 failed with error -22 [ 496.186556][ T5164] usb 2-1: USB disconnect, device number 13 [ 496.713867][T12055] loop4: detected capacity change from 0 to 32768 [ 496.886177][T12055] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 496.903081][T12055] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 496.948558][T12055] bcachefs (loop4): alloc_read... done [ 496.954170][T12055] bcachefs (loop4): stripes_read... done [ 496.959844][T12055] bcachefs (loop4): snapshots_read... done [ 496.968253][T12055] bcachefs (loop4): journal_replay... done [ 496.974152][T12055] bcachefs (loop4): resume_logged_ops... done [ 496.996178][T12055] bcachefs (loop4): going read-write [ 497.014961][T12055] bcachefs (loop4): done starting filesystem [ 497.507908][ T29] audit: type=1800 audit(1721311084.621:175): pid=12075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2068" name="bus" dev="loop4" ino=1073741825 res=0 errno=0 [ 497.797349][ T5096] bcachefs (loop4): shutting down [ 497.817979][ T5096] bcachefs (loop4): going read-only [ 497.852486][ T5096] bcachefs (loop4): finished waiting for writes to stop [ 497.890555][ T5096] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 497.935769][ T5096] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 497.950282][T10276] Bluetooth: hci6: command 0x0406 tx timeout [ 497.991457][ T5096] bcachefs (loop4): shutdown complete, journal seq 12 [ 498.020235][ T5096] bcachefs (loop4): marking filesystem clean [ 498.149803][ T5096] bcachefs (loop4): shutdown complete [ 498.255863][T12092] loop5: detected capacity change from 0 to 8 [ 498.269936][T12092] squashfs image failed sanity check [ 499.747205][ T5162] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 499.773970][T12095] loop5: detected capacity change from 0 to 32768 [ 499.807266][T12095] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2076 (12095) [ 499.817183][T12095] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 499.817320][T12095] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 499.817359][T12095] BTRFS info (device loop5): using free-space-tree [ 499.960238][ T5162] usb 1-1: Using ep0 maxpacket: 32 [ 499.962899][ T5162] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 499.962935][ T5162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.968922][ T5162] usb 1-1: probing VID:PID(2201:012C) [ 499.980389][ T5162] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 500.034489][ T5162] vub300 1-1:32.0: probe with driver vub300 failed with error -22 [ 500.148046][T12136] Driver unsupported XDP return value 0 on prog (id 375) dev N/A, expect packet loss! [ 500.215266][ T8838] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 500.247136][ T5160] usb 1-1: USB disconnect, device number 18 [ 500.631478][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2092'. [ 500.995920][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.002612][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.047424][T12161] loop5: detected capacity change from 0 to 8 [ 501.059066][T12160] loop3: detected capacity change from 0 to 512 [ 501.093535][T12161] squashfs image failed sanity check [ 501.101528][T12160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 501.296542][T12160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.356355][ T5112] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 501.384288][T12160] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.460501][ T5112] Bluetooth: hci3: SCO packet for unknown connection handle 2097 [ 501.516497][T12170] netdevsim netdevsim5: Direct firmware load for ng failed with error -2 [ 501.545310][T12170] netdevsim netdevsim5: Falling back to sysfs fallback for: ng [ 502.222825][T12184] loop2: detected capacity change from 0 to 1024 [ 502.237367][T12184] EXT4-fs: Ignoring removed orlov option [ 502.247576][T12184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 502.306052][T12184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.347679][ T5112] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 502.357650][ T5112] Bluetooth: hci3: ISO packet for unknown connection handle 48 [ 502.423375][T12192] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2104'. [ 502.457742][ T29] audit: type=1804 audit(1721311089.751:176): pid=12195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2101" name="/newroot/95/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 502.458854][T12192] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 502.488318][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 502.524390][T12195] macvtap2: entered promiscuous mode [ 502.531469][T12192] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 502.556578][T12195] macvtap2: entered allmulticast mode [ 502.585898][T12195] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 502.614011][ T5204] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 502.637180][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 502.728793][T12197] macvtap2: left promiscuous mode [ 502.738859][T12197] macvtap2: left allmulticast mode [ 502.800158][ T5204] usb 5-1: Using ep0 maxpacket: 8 [ 502.812562][ T5204] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.839262][ T5204] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 502.850779][ T5204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.865116][ T5204] usb 5-1: config 0 descriptor?? [ 502.888676][ T5204] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 503.055885][T12208] loop1: detected capacity change from 0 to 512 [ 503.097687][T12208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 503.142858][ T9752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.159993][T12210] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2110'. [ 503.174199][T12211] loop5: detected capacity change from 0 to 8 [ 503.182986][T12210] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2110'. [ 503.196763][T12211] squashfs image failed sanity check [ 503.213050][T12210] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 503.219190][T12208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.240858][T12166] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 503.252725][T12208] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.298949][T12215] loop2: detected capacity change from 0 to 512 [ 503.311240][T12215] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 503.339078][T12215] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz.2.2111: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 503.366367][T12215] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2111: couldn't read orphan inode 15 (err -117) [ 503.391242][ T5112] Bluetooth: hci3: command 0x0406 tx timeout [ 503.399356][T12215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.420212][T12215] ext2 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.445394][ T29] audit: type=1800 audit(1721311090.751:177): pid=12215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2111" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 503.546058][ T9752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.570239][ T5166] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 503.759529][ T5112] Bluetooth: hci6: SCO packet for unknown connection handle 2097 [ 503.771400][T12226] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 503.790720][T12226] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 503.806998][ T5166] usb 1-1: Using ep0 maxpacket: 16 [ 503.820757][ T5166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 503.833673][ T5166] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 503.855289][ T5166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.869162][ T5166] usb 1-1: config 0 descriptor?? [ 504.059204][ T5114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.220849][ T5204] gspca_vc032x: reg_r err -110 [ 504.227230][ T5204] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 504.287825][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.301365][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.359809][ T5166] hid (null): nested delimiters [ 504.368192][ T5166] hid (null): nested delimiters [ 504.378279][ T5166] hid (null): nested delimiters [ 504.386919][ T5166] hid (null): report_id 24797 is invalid [ 504.399596][ T5166] hid (null): bogus close delimiter [ 504.408724][ T5166] hid (null): unknown global tag 0x83 [ 504.416857][ T5166] hid (null): unknown global tag 0xc [ 504.439159][ T5166] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1 [ 504.459633][ T5204] usb 5-1: USB disconnect, device number 11 [ 504.465843][ T5166] hid-generic 0003:0158:0100.0010: unexpected long global item [ 504.484820][ T5166] hid-generic 0003:0158:0100.0010: probe with driver hid-generic failed with error -22 [ 504.587125][ T5166] usb 1-1: USB disconnect, device number 19 [ 504.687630][T12236] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2117'. [ 504.710515][T12236] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 504.761814][T12236] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 505.219557][T12253] loop3: detected capacity change from 0 to 8 [ 505.265479][T12253] squashfs image failed sanity check [ 505.448402][T12249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.582613][T12258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.710543][ T5112] Bluetooth: hci6: command 0x0406 tx timeout [ 506.125797][ T5095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.333435][T12276] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 506.346171][T12276] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 506.461901][ T5160] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 506.570935][T12279] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2133'. [ 506.597346][T12279] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 506.617747][T12279] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 506.680391][ T5160] usb 6-1: Using ep0 maxpacket: 8 [ 506.694131][ T5160] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.708067][ T5160] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 506.731260][ T5160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.766293][ T5160] usb 6-1: config 0 descriptor?? [ 506.802680][ T5160] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 507.021995][T12294] loop3: detected capacity change from 0 to 8 [ 507.091722][T12294] squashfs image failed sanity check [ 507.421039][T12306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.710342][T12316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.901898][T12310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.016254][T12322] loop0: detected capacity change from 0 to 1024 [ 508.024831][T12322] EXT4-fs: Ignoring removed orlov option [ 508.031366][T12322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.091548][T12322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.220355][ T29] audit: type=1804 audit(1721311095.521:178): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2147" name="/newroot/380/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 508.251263][ T5160] gspca_vc032x: reg_r err -110 [ 508.257319][ T5160] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 508.288272][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 508.319725][T12326] team_slave_0: entered promiscuous mode [ 508.325572][T12326] team_slave_1: entered promiscuous mode [ 508.338824][T12326] macvtap3: entered promiscuous mode [ 508.345592][T12326] team0: entered promiscuous mode [ 508.364048][T12326] macvtap3: entered allmulticast mode [ 508.369701][T12326] team0: entered allmulticast mode [ 508.378369][T12326] team_slave_0: entered allmulticast mode [ 508.389182][T12326] team_slave_1: entered allmulticast mode [ 508.398342][T12326] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 508.407175][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 508.423639][T12327] team0: left allmulticast mode [ 508.428564][T12327] team_slave_0: left allmulticast mode [ 508.437707][T12327] team_slave_1: left allmulticast mode [ 508.448135][T12327] team0: left promiscuous mode [ 508.453855][T12327] team_slave_0: left promiscuous mode [ 508.459371][T12327] team_slave_1: left promiscuous mode [ 508.498750][T12327] macvtap3: left promiscuous mode [ 508.511674][T12327] macvtap3: left allmulticast mode [ 508.515545][T11757] usb 6-1: USB disconnect, device number 21 [ 508.886639][T12335] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2150'. [ 508.900048][T12335] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 508.909350][T12335] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 508.952815][ T5094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.046920][T12345] loop2: detected capacity change from 0 to 8 [ 509.077284][T12345] squashfs image failed sanity check [ 509.308203][T12355] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2154'. [ 509.348733][T12355] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2154'. [ 509.353653][T12362] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 509.401805][T12363] loop2: detected capacity change from 0 to 512 [ 509.419365][T12363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 509.476291][T12363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.494216][T12368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.507790][T12363] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.695395][ T9752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.768882][T12375] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2163'. [ 509.779527][T12375] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2163'. [ 509.791959][T12375] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 509.840337][T11757] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 509.876286][T12376] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 48115 - 0 [ 509.910131][T12376] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 48115 - 0 [ 509.918977][T12376] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 48115 - 0 [ 509.930249][T12376] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 48115 - 0 [ 509.939348][T12376] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 57910 - 0 [ 509.951450][T12376] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 57910 - 0 [ 509.961627][T12376] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 57910 - 0 [ 509.970763][T12376] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 57910 - 0 [ 509.982125][T12376] geneve2: entered promiscuous mode [ 509.987360][T12376] geneve2: entered allmulticast mode [ 510.033665][T11757] usb 1-1: Using ep0 maxpacket: 16 [ 510.045252][T11757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 510.060558][T11757] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 510.066160][T12353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.073486][T11757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.101405][T11757] usb 1-1: config 0 descriptor?? [ 510.230218][ T5153] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 510.257108][T12383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.288043][T12384] loop3: detected capacity change from 0 to 1024 [ 510.295658][T12384] EXT4-fs: Ignoring removed orlov option [ 510.302656][T12384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 510.351152][T12384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.438157][ T5153] usb 3-1: Using ep0 maxpacket: 16 [ 510.450919][ T5153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 510.463954][ T29] audit: type=1804 audit(1721311097.761:179): pid=12389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2166" name="/newroot/385/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 510.491576][ T5153] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 510.500814][ T5153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.516418][ T5153] usb 3-1: config 0 descriptor?? [ 510.523015][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2166'. [ 510.534500][T12355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.560661][T12355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.572983][T12390] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 510.579627][T12390] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 510.585888][T12389] team_slave_0: entered promiscuous mode [ 510.591058][T12390] vhci_hcd vhci_hcd.0: Device attached [ 510.593144][T12389] team_slave_1: entered promiscuous mode [ 510.606288][T11757] hid (null): nested delimiters [ 510.617957][T12391] vhci_hcd: connection closed [ 510.620006][T11757] hid (null): nested delimiters [ 510.629939][ T52] vhci_hcd: stop threads [ 510.640181][ T52] vhci_hcd: release socket [ 510.654732][ T52] vhci_hcd: disconnect device [ 510.663259][T11757] hid (null): nested delimiters [ 510.680619][T12389] macvtap3: entered promiscuous mode [ 510.687387][T12389] team0: entered promiscuous mode [ 510.692789][T11757] hid (null): report_id 24797 is invalid [ 510.706494][T12389] macvtap3: entered allmulticast mode [ 510.712819][T12389] team0: entered allmulticast mode [ 510.716047][T11757] hid (null): bogus close delimiter [ 510.718262][T12389] team_slave_0: entered allmulticast mode [ 510.729732][T12389] team_slave_1: entered allmulticast mode [ 510.748893][T11757] hid (null): unknown global tag 0x83 [ 510.754881][T11757] hid (null): unknown global tag 0xc [ 510.772990][T11757] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1 [ 510.778080][T12389] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 510.787610][T11757] hid-generic 0003:0158:0100.0011: unexpected long global item [ 510.796393][T11757] hid-generic 0003:0158:0100.0011: probe with driver hid-generic failed with error -22 [ 510.808199][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2166'. [ 510.819647][T11757] usb 1-1: USB disconnect, device number 20 [ 510.833046][T12393] team0: left allmulticast mode [ 510.838139][T12393] team_slave_0: left allmulticast mode [ 510.843726][T12393] team_slave_1: left allmulticast mode [ 510.850004][T12393] team0: left promiscuous mode [ 510.855557][T12393] team_slave_0: left promiscuous mode [ 510.861105][T12393] team_slave_1: left promiscuous mode [ 510.869275][T12393] macvtap3: left promiscuous mode [ 510.876794][T12393] macvtap3: left allmulticast mode [ 510.924429][T12395] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 510.930405][ T5166] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 510.941052][T12395] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 510.974524][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.991205][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.016362][ T5153] hid (null): nested delimiters [ 511.030207][ T5153] hid (null): nested delimiters [ 511.035100][ T5153] hid (null): nested delimiters [ 511.039967][ T5153] hid (null): report_id 24797 is invalid [ 511.059227][ T5153] hid (null): bogus close delimiter [ 511.065095][ T5153] hid (null): unknown global tag 0x83 [ 511.078138][ T5153] hid (null): unknown global tag 0xc [ 511.089372][ T5153] hid-generic 0003:0158:0100.0012: unknown main item tag 0x1 [ 511.097233][ T5153] hid-generic 0003:0158:0100.0012: unexpected long global item [ 511.105811][ T5153] hid-generic 0003:0158:0100.0012: probe with driver hid-generic failed with error -22 [ 511.159908][ T5166] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 511.181586][ T5166] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 511.182206][ T5114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.200220][ T5166] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 511.214844][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.273357][T11757] usb 3-1: USB disconnect, device number 15 [ 511.293349][T12390] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 511.480517][T12408] loop1: detected capacity change from 0 to 8 [ 511.489102][T12408] squashfs image failed sanity check [ 511.696896][T12414] __nla_validate_parse: 1 callbacks suppressed [ 511.696919][T12414] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2175'. [ 511.754091][T12414] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2175'. [ 511.986336][T12417] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 512.380376][ T5153] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 512.610319][ T5153] usb 6-1: Using ep0 maxpacket: 16 [ 512.636991][ T5153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 512.677821][ T5153] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 512.706230][ T5153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.735732][ T5153] usb 6-1: config 0 descriptor?? [ 513.162441][T12414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.193172][T12414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.257758][ T5153] hid (null): nested delimiters [ 513.286715][ T5153] hid (null): nested delimiters [ 513.287425][ T5162] usb 5-1: USB disconnect, device number 12 [ 513.317418][ T5153] hid (null): nested delimiters [ 513.340359][ T5153] hid (null): report_id 24797 is invalid [ 513.346224][ T5153] hid (null): bogus close delimiter [ 513.370476][ T5153] hid (null): unknown global tag 0x83 [ 513.380712][ T5153] hid (null): unknown global tag 0xc [ 513.410679][ T5153] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1 [ 513.439848][ T5153] hid-generic 0003:0158:0100.0013: unexpected long global item [ 513.460555][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'. [ 513.470832][ T5153] hid-generic 0003:0158:0100.0013: probe with driver hid-generic failed with error -22 [ 513.509710][ T5153] usb 6-1: USB disconnect, device number 22 [ 513.522114][T12431] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2180'. [ 513.546761][T12431] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 513.576226][T12431] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 513.766536][T12443] loop0: detected capacity change from 0 to 1024 [ 513.799655][T12443] EXT4-fs: Ignoring removed orlov option [ 513.816488][T12443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.853156][T12443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.950552][T12451] loop1: detected capacity change from 0 to 8 [ 513.978118][T12451] squashfs image failed sanity check [ 513.996949][ T29] audit: type=1804 audit(1721311101.301:180): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2184" name="/newroot/383/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 514.065758][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 514.115652][T12454] team_slave_0: entered promiscuous mode [ 514.121532][T12454] team_slave_1: entered promiscuous mode [ 514.184834][T12454] macvtap4: entered promiscuous mode [ 514.199961][T12454] team0: entered promiscuous mode [ 514.216945][T12454] macvtap4: entered allmulticast mode [ 514.225894][T12454] team0: entered allmulticast mode [ 514.231701][T12457] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 514.238325][T12457] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 514.249736][T12458] vhci_hcd: connection closed [ 514.250216][T12457] vhci_hcd vhci_hcd.0: Device attached [ 514.263556][T12459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.273963][ T12] vhci_hcd: stop threads [ 514.284061][ T12] vhci_hcd: release socket [ 514.298927][T12454] team_slave_0: entered allmulticast mode [ 514.308340][T12454] team_slave_1: entered allmulticast mode [ 514.339852][ T12] vhci_hcd: disconnect device [ 514.343945][T12454] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 514.380367][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 514.409683][T12456] team0: left allmulticast mode [ 514.432844][T12456] team_slave_0: left allmulticast mode [ 514.439461][T12468] loop2: detected capacity change from 0 to 1024 [ 514.448468][T12456] team_slave_1: left allmulticast mode [ 514.455189][T12468] EXT4-fs: Ignoring removed orlov option [ 514.456211][T12456] team0: left promiscuous mode [ 514.467649][T12456] team_slave_0: left promiscuous mode [ 514.473201][T12456] team_slave_1: left promiscuous mode [ 514.475212][T12468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.485500][T12456] macvtap4: left promiscuous mode [ 514.492907][T12456] macvtap4: left allmulticast mode [ 514.512718][T12468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.599900][ T29] audit: type=1804 audit(1721311101.901:181): pid=12475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2189" name="/newroot/109/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 514.657873][ T5094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.686428][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 514.728113][T12475] macvtap3: entered promiscuous mode [ 514.741470][T12475] macvtap3: entered allmulticast mode [ 514.761173][T12475] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 514.769662][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 514.790217][T12477] macvtap3: left promiscuous mode [ 514.795476][T12477] macvtap3: left allmulticast mode [ 514.920335][ T5162] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 515.112751][ T5162] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 515.136933][ T5162] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 515.174079][ T5162] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 515.186884][ T5162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.208811][T12438] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 515.382980][ T9752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.676430][T12492] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2195'. [ 515.690615][T12492] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 515.716258][T12492] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 516.116125][T12500] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 516.504952][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'. [ 516.735967][T12509] loop5: detected capacity change from 0 to 1024 [ 516.773378][T12509] EXT4-fs: Ignoring removed orlov option [ 516.779100][T12509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.820828][T11757] usb 5-1: USB disconnect, device number 13 [ 516.851853][T12509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.892348][T12512] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 516.950485][T12515] loop2: detected capacity change from 0 to 8 [ 516.992645][T12515] squashfs image failed sanity check [ 517.098435][ T29] audit: type=1804 audit(1721311104.391:182): pid=12518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2203" name="/newroot/155/file1/file1" dev="loop5" ino=15 res=1 errno=0 [ 517.173545][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2203'. [ 517.239865][T12518] team_slave_0: entered promiscuous mode [ 517.245655][T12518] team_slave_1: entered promiscuous mode [ 517.274478][T12518] macvtap1: entered promiscuous mode [ 517.286239][T12518] team0: entered promiscuous mode [ 517.316052][T12518] macvtap1: entered allmulticast mode [ 517.335664][T12518] team0: entered allmulticast mode [ 517.348684][T12518] team_slave_0: entered allmulticast mode [ 517.371021][T12518] team_slave_1: entered allmulticast mode [ 517.395814][T12518] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 517.413604][T12536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.436027][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2203'. [ 517.475947][T12523] team0: left allmulticast mode [ 517.497133][T12523] team_slave_0: left allmulticast mode [ 517.518822][T12523] team_slave_1: left allmulticast mode [ 517.534785][T12523] team0: left promiscuous mode [ 517.559829][T12523] team_slave_0: left promiscuous mode [ 517.565370][T12523] team_slave_1: left promiscuous mode [ 517.600194][T12523] macvtap1: left promiscuous mode [ 517.626637][T12523] macvtap1: left allmulticast mode [ 517.667457][T12540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.699128][T12534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.753538][ T8838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.929695][T12545] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2210'. [ 517.939601][T12545] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 517.949844][T12545] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 518.094014][T12524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.782758][T12556] loop5: detected capacity change from 0 to 32768 [ 518.819987][T12556] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2214 (12556) [ 518.862935][T12556] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 518.897185][T12556] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 519.176037][T12556] BTRFS info (device loop5): using free-space-tree [ 519.332638][T12586] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 519.400513][T12592] loop4: detected capacity change from 0 to 8 [ 519.453184][T12592] squashfs image failed sanity check [ 519.471304][T12597] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2221'. [ 519.480448][T12597] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2221'. [ 519.548795][T12599] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 519.733596][T12597] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 35910 - 0 [ 519.811955][T12597] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 35910 - 0 [ 519.822463][T12597] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 35910 - 0 [ 519.857326][T12597] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 35910 - 0 [ 519.880667][T12597] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 40028 - 0 [ 519.889744][T12571] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 519.896414][T12571] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 519.902101][T12597] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 40028 - 0 [ 519.924228][ T8838] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 520.010224][T12597] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 40028 - 0 [ 520.131713][T12603] vhci_hcd: connection closed [ 520.151024][T12597] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 40028 - 0 [ 520.182412][T12571] vhci_hcd vhci_hcd.0: Device attached [ 520.188576][ T984] vhci_hcd: stop threads [ 520.200328][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 520.202953][ T984] vhci_hcd: release socket [ 520.240144][ T984] vhci_hcd: disconnect device [ 520.260994][T12597] geneve2: entered promiscuous mode [ 520.278292][ T5166] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 520.342884][T12597] geneve2: entered allmulticast mode [ 520.440987][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 520.459557][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 520.499249][ T5166] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 520.499884][ T9] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 520.523051][ T5166] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 520.544781][ T5166] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 520.570344][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.583813][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.599141][T12591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 520.648000][ T9] usb 2-1: config 0 descriptor?? [ 521.010996][T12613] loop5: detected capacity change from 0 to 1024 [ 521.039964][T12613] EXT4-fs: Ignoring removed orlov option [ 521.061401][T12613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 521.083849][T12613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.121535][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.141287][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.172051][T12616] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2226'. [ 521.181884][ T29] audit: type=1804 audit(1721311108.481:183): pid=12621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2223" name="/newroot/158/file1/file1" dev="loop5" ino=15 res=1 errno=0 [ 521.210303][T12616] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 521.218962][T12616] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 521.238053][ T9] hid (null): nested delimiters [ 521.250153][ T9] hid (null): nested delimiters [ 521.262581][ T9] hid (null): nested delimiters [ 521.276842][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2223'. [ 521.287117][ T9] hid (null): report_id 24797 is invalid [ 521.312023][ T9] hid (null): bogus close delimiter [ 521.335256][ T9] hid (null): unknown global tag 0x83 [ 521.363109][ T9] hid (null): unknown global tag 0xc [ 521.372462][T12621] team_slave_0: entered promiscuous mode [ 521.378227][T12621] team_slave_1: entered promiscuous mode [ 521.380381][ T9] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1 [ 521.395242][T12621] macvtap2: entered promiscuous mode [ 521.401907][ T9] hid-generic 0003:0158:0100.0014: unexpected long global item [ 521.416023][ T9] hid-generic 0003:0158:0100.0014: probe with driver hid-generic failed with error -22 [ 521.425886][T12621] team0: entered promiscuous mode [ 521.441151][T12621] macvtap2: entered allmulticast mode [ 521.452961][ T9] usb 2-1: USB disconnect, device number 14 [ 521.469667][T12621] team0: entered allmulticast mode [ 521.485975][T12621] team_slave_0: entered allmulticast mode [ 521.502539][T12621] team_slave_1: entered allmulticast mode [ 521.523437][T12621] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 521.536684][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2223'. [ 521.551663][T12622] team0: left allmulticast mode [ 521.569698][T12622] team_slave_0: left allmulticast mode [ 521.592528][T12622] team_slave_1: left allmulticast mode [ 521.612414][T12622] team0: left promiscuous mode [ 521.626261][T12622] team_slave_0: left promiscuous mode [ 521.631861][T12622] team_slave_1: left promiscuous mode [ 521.647718][T12622] macvtap2: left promiscuous mode [ 521.664655][T12622] macvtap2: left allmulticast mode [ 521.860624][ T8838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.922382][T12627] loop0: detected capacity change from 0 to 512 [ 521.933080][T12627] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 521.946781][T12627] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz.0.2228: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 521.966882][T12627] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.2228: couldn't read orphan inode 15 (err -117) [ 521.981860][T12627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.994466][T12627] ext2 filesystem being mounted at /391/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.021269][ T29] audit: type=1800 audit(1721311109.331:184): pid=12627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2228" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 522.174296][ T5094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.290257][T12639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.402169][ T5153] usb 4-1: USB disconnect, device number 18 [ 522.457666][T12639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.688414][T12652] loop3: detected capacity change from 0 to 8 [ 522.743871][T12652] squashfs image failed sanity check [ 522.829451][T12654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.539126][T12645] loop0: detected capacity change from 0 to 32768 [ 523.867677][T12645] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 523.884739][T12679] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2239'. [ 523.894362][T12679] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 523.903922][T12679] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 523.913836][T12645] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 523.996034][T12645] bcachefs (loop0): alloc_read... done [ 524.013453][T12645] bcachefs (loop0): stripes_read... done [ 524.030741][T12645] bcachefs (loop0): snapshots_read... done [ 524.045618][T12645] bcachefs (loop0): journal_replay... done [ 524.057369][T12645] bcachefs (loop0): resume_logged_ops... done [ 524.078904][T12645] bcachefs (loop0): going read-write [ 524.102211][T12645] bcachefs (loop0): done starting filesystem [ 524.210902][ T29] audit: type=1800 audit(1721311111.521:185): pid=12689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2233" name="bus" dev="loop0" ino=1073741825 res=0 errno=0 [ 524.506417][ T5094] bcachefs (loop0): shutting down [ 524.515040][T12694] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2244'. [ 524.529227][ T5094] bcachefs (loop0): going read-only [ 524.545937][ T5094] bcachefs (loop0): finished waiting for writes to stop [ 524.557329][T12694] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2244'. [ 524.580805][T12696] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 524.597997][ T5094] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 524.623757][ T5094] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 524.638357][ T5094] bcachefs (loop0): shutdown complete, journal seq 16 [ 524.653878][ T5094] bcachefs (loop0): marking filesystem clean [ 524.766508][ T5094] bcachefs (loop0): shutdown complete [ 524.935055][T12699] loop1: detected capacity change from 0 to 1024 [ 524.950486][ T5162] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 524.979020][T12699] EXT4-fs: Ignoring removed orlov option [ 525.008937][T12699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 525.072246][T12699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.150693][ T5162] usb 4-1: Using ep0 maxpacket: 16 [ 525.158188][ T5162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 525.170861][ T5162] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 525.181734][ T5162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.200975][ T5162] usb 4-1: config 0 descriptor?? [ 525.238046][ T29] audit: type=1804 audit(1721311112.541:186): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2246" name="/newroot/421/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 525.253315][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2246'. [ 525.344789][T12705] team_slave_0: entered promiscuous mode [ 525.350584][T12705] team_slave_1: entered promiscuous mode [ 525.387995][T12705] macvtap1: entered promiscuous mode [ 525.403845][T12710] loop4: detected capacity change from 0 to 8 [ 525.410763][T12705] team0: entered promiscuous mode [ 525.416435][T12705] macvtap1: entered allmulticast mode [ 525.477892][T12710] squashfs image failed sanity check [ 525.489548][T12705] team0: entered allmulticast mode [ 525.510262][T12705] team_slave_0: entered allmulticast mode [ 525.532447][T12705] team_slave_1: entered allmulticast mode [ 525.570207][T12705] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 525.580821][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2246'. [ 525.626504][T12694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.640718][T12694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.710610][T12711] team0: left allmulticast mode [ 525.715597][T12711] team_slave_0: left allmulticast mode [ 525.772340][ T5162] hid (null): nested delimiters [ 525.777245][ T5162] hid (null): nested delimiters [ 525.785412][T12711] team_slave_1: left allmulticast mode [ 525.798885][ T5162] hid (null): nested delimiters [ 525.809327][ T5162] hid (null): report_id 24797 is invalid [ 526.014417][T12711] team0: left promiscuous mode [ 526.040902][T12711] team_slave_0: left promiscuous mode [ 526.046448][T12711] team_slave_1: left promiscuous mode [ 526.985798][ T5162] hid (null): bogus close delimiter [ 527.010167][ T5162] hid (null): unknown global tag 0x83 [ 527.015646][ T5162] hid (null): unknown global tag 0xc [ 527.021157][T12711] macvtap1: left promiscuous mode [ 527.029020][T12704] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 527.035659][T12704] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 527.043900][ T5162] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 527.083350][ T5162] hid-generic 0003:0158:0100.0015: unexpected long global item [ 527.091273][T12704] vhci_hcd vhci_hcd.0: Device attached [ 527.097885][ T5162] hid-generic 0003:0158:0100.0015: probe with driver hid-generic failed with error -22 [ 527.110859][T12719] vhci_hcd: connection closed [ 527.119764][T10276] Bluetooth: hci3: unexpected event 0x31 length: 23 > 6 [ 527.134327][T12711] macvtap1: left allmulticast mode [ 527.153274][ T5162] usb 4-1: USB disconnect, device number 19 [ 527.207295][ T12] vhci_hcd: stop threads [ 527.219694][ T12] vhci_hcd: release socket [ 527.229078][T12722] netdevsim netdevsim5: Direct firmware load for ng failed with error -2 [ 527.248851][T12722] netdevsim netdevsim5: Falling back to sysfs fallback for: ng [ 527.260229][ T12] vhci_hcd: disconnect device [ 527.278128][T12727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.299947][ T5095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.315833][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.403476][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.491673][T12735] loop0: detected capacity change from 0 to 512 [ 527.500610][ T5166] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 527.508785][T12735] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 527.529368][T12735] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz.0.2245: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 527.557549][T12733] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2254'. [ 527.570422][T12735] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.2245: couldn't read orphan inode 15 (err -117) [ 527.589085][T12733] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 527.590802][T12735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.599335][T12735] ext2 filesystem being mounted at /393/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.628494][T12733] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 527.637063][ T29] audit: type=1800 audit(1721311114.931:187): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2245" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 527.723637][ T5166] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 527.737703][ T5166] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 527.755471][ T5094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.763495][ T5166] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 527.789869][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.802342][T12709] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.854632][T12742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.129403][ T5162] usb 3-1: USB disconnect, device number 16 [ 528.291096][T12749] loop3: detected capacity change from 0 to 1024 [ 528.298731][T12749] EXT4-fs: Ignoring removed orlov option [ 528.305222][T12749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 528.328521][T12749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.474666][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 528.503513][T12756] team_slave_0: entered promiscuous mode [ 528.509234][T12756] team_slave_1: entered promiscuous mode [ 528.639597][T12756] macvtap4: entered promiscuous mode [ 528.645444][T12756] team0: entered promiscuous mode [ 528.655648][T12756] macvtap4: entered allmulticast mode [ 528.661313][T12756] team0: entered allmulticast mode [ 528.669047][T12756] team_slave_0: entered allmulticast mode [ 528.675129][T12756] team_slave_1: entered allmulticast mode [ 528.696687][T12756] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 528.715452][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 528.769610][T12758] team0: left allmulticast mode [ 528.769638][T12758] team_slave_0: left allmulticast mode [ 528.769658][T12758] team_slave_1: left allmulticast mode [ 528.769686][T12758] team0: left promiscuous mode [ 528.770421][T12758] team_slave_0: left promiscuous mode [ 528.770495][T12758] team_slave_1: left promiscuous mode [ 528.774824][T12758] macvtap4: left promiscuous mode [ 528.774845][T12758] macvtap4: left allmulticast mode [ 529.070500][T10276] Bluetooth: hci3: command 0x0406 tx timeout [ 529.200212][ T5166] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 529.246882][ T5114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.390493][ T5166] usb 5-1: Using ep0 maxpacket: 8 [ 529.406296][ T5166] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.455640][ T5166] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 529.484912][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.514447][ T5166] usb 5-1: config 0 descriptor?? [ 529.531813][T12776] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 529.550262][T12776] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 529.595397][ T5166] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 529.682558][T12774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.868394][T12781] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2267'. [ 529.905410][T12781] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 529.930205][T12781] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 530.056251][T12784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.483513][T12799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.515838][T12799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.920398][ T5166] gspca_vc032x: reg_r err -110 [ 530.925461][ T5166] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 531.029739][T12806] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 531.036383][T12806] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 531.049570][T12806] vhci_hcd vhci_hcd.0: Device attached [ 531.074852][T12811] vhci_hcd: connection closed [ 531.075500][ T12] vhci_hcd: stop threads [ 531.105053][ T12] vhci_hcd: release socket [ 531.109684][ T12] vhci_hcd: disconnect device [ 531.154651][ T51] usb 5-1: USB disconnect, device number 14 [ 531.204717][T12814] loop5: detected capacity change from 0 to 1024 [ 531.221073][T12814] EXT4-fs: Ignoring removed orlov option [ 531.236174][T12814] EXT4-fs: Ignoring removed nomblk_io_submit option [ 531.259964][T12814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.325915][T12820] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.333906][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.370647][ T5153] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 531.429075][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2278'. [ 531.478192][T12825] team_slave_0: entered promiscuous mode [ 531.479207][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2280'. [ 531.484123][T12825] team_slave_1: entered promiscuous mode [ 531.490455][T12825] macvtap3: entered promiscuous mode [ 531.520637][T12825] team0: entered promiscuous mode [ 531.547917][T12825] macvtap3: entered allmulticast mode [ 531.570345][T12825] team0: entered allmulticast mode [ 531.580806][ T5153] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 531.597583][T12825] team_slave_0: entered allmulticast mode [ 531.615125][T12825] team_slave_1: entered allmulticast mode [ 531.622831][ T5153] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 531.668227][T12825] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 531.676689][ T5153] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 531.690358][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.703799][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2278'. [ 531.748893][T12806] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 531.761651][T12829] team0: left allmulticast mode [ 531.770429][T12827] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 531.777193][T12827] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 531.801393][T12829] team_slave_0: left allmulticast mode [ 531.811582][T12827] vhci_hcd vhci_hcd.0: Device attached [ 531.821602][T12832] vhci_hcd: connection closed [ 531.830198][ T984] vhci_hcd: stop threads [ 531.890423][ T984] vhci_hcd: release socket [ 531.890456][ T984] vhci_hcd: disconnect device [ 531.890500][T12829] team_slave_1: left allmulticast mode [ 531.890593][T12829] team0: left promiscuous mode [ 531.891338][T12829] team_slave_0: left promiscuous mode [ 531.891408][T12829] team_slave_1: left promiscuous mode [ 531.894889][T12829] macvtap3: left promiscuous mode [ 531.894925][T12829] macvtap3: left allmulticast mode [ 532.086300][T12836] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2282'. [ 532.099888][ T8838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.140233][ T5164] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 532.158670][T12836] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 532.174960][T12836] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 532.314364][T12843] loop4: detected capacity change from 0 to 1024 [ 532.337810][T12843] EXT4-fs: Ignoring removed orlov option [ 532.348830][T12843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 532.367255][ T5164] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 532.384188][ T5164] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 532.396224][T10276] Bluetooth: hci6: unexpected event 0x31 length: 23 > 6 [ 532.400834][T12844] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 532.422849][ T5164] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 532.432743][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.446101][T12844] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 532.462595][T12843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.675984][T12827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 532.701238][ T29] audit: type=1804 audit(1721311120.001:188): pid=12843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2285" name="/newroot/365/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 532.789065][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2285'. [ 532.891417][T12843] dummy0: entered promiscuous mode [ 532.898203][T12843] macvtap3: entered promiscuous mode [ 532.904242][T12843] macvtap3: entered allmulticast mode [ 532.909911][T12843] dummy0: entered allmulticast mode [ 532.919361][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2285'. [ 532.969109][T12852] dummy0: left allmulticast mode [ 533.020744][T12852] dummy0: left promiscuous mode [ 533.054469][T12852] macvtap3: left promiscuous mode [ 533.063884][T12852] macvtap3: left allmulticast mode [ 533.274688][ T5096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.481181][T12861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.494419][T12859] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2287'. [ 533.768624][ T5162] usb 2-1: USB disconnect, device number 15 [ 534.190179][ T5153] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 534.350385][T10276] Bluetooth: hci6: command 0x0406 tx timeout [ 534.400238][ T5153] usb 3-1: Using ep0 maxpacket: 8 [ 534.443242][ T5153] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.487265][ T5153] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 534.489977][ T5162] usb 4-1: USB disconnect, device number 20 [ 534.728453][ T5153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.986242][ T5153] usb 3-1: config 0 descriptor?? [ 535.359080][ T5153] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 535.542154][T12890] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 535.778164][T12892] syz_tun: entered promiscuous mode [ 535.878688][T12892] syz_tun: left promiscuous mode [ 536.015431][T12896] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 536.040685][T12896] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 536.157810][T12877] loop0: detected capacity change from 0 to 32768 [ 536.189077][T12877] bcachefs (/dev/loop0): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81) [ 536.226043][T12897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.405890][T12877] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 536.422465][T12877] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 536.477304][T12877] bcachefs (loop0): alloc_read... done [ 536.487590][T12877] bcachefs (loop0): stripes_read... done [ 536.496112][T12877] bcachefs (loop0): snapshots_read... done [ 536.519620][T12877] bcachefs (loop0): journal_replay... done [ 536.538136][T12877] bcachefs (loop0): resume_logged_ops... done [ 536.553962][T12877] bcachefs (loop0): going read-write [ 536.601071][T12877] bcachefs (loop0): done starting filesystem [ 536.670592][ T5153] gspca_vc032x: reg_r err -110 [ 536.675750][ T5153] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 536.968729][ T5162] usb 3-1: USB disconnect, device number 17 [ 536.976458][ T5094] bcachefs (loop0): shutting down [ 537.002974][ T5094] bcachefs (loop0): going read-only [ 537.017033][ T5094] bcachefs (loop0): finished waiting for writes to stop [ 537.064439][ T5094] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 537.092261][ T5094] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 537.129735][ T5094] ------------[ cut here ]------------ [ 537.134075][T12922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.135340][ T5094] journal shutdown error: cur seq 13 but last empty seq 14 [ 537.153695][ T5094] WARNING: CPU: 0 PID: 5094 at fs/bcachefs/journal.c:1191 bch2_fs_journal_stop+0x5f3/0x630 [ 537.172603][ T5094] Modules linked in: [ 537.177037][ T5094] CPU: 0 PID: 5094 Comm: syz-executor Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 537.187069][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 537.197946][ T5094] RIP: 0010:bch2_fs_journal_stop+0x5f3/0x630 [ 537.204029][ T5094] Code: 44 24 18 42 80 3c 20 00 48 8b 5c 24 20 74 08 48 89 df e8 90 fb c6 fd 48 8b 13 48 c7 c7 a0 76 13 8c 4c 89 f6 e8 3e e0 22 fd 90 <0f> 0b 90 90 e9 e4 fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 7f fc ff [ 537.223867][ T5094] RSP: 0018:ffffc900047f78a0 EFLAGS: 00010246 [ 537.229990][ T5094] RAX: e9f51142e2b70c00 RBX: ffff88804f44aaa0 RCX: ffff8880259d8000 [ 537.238131][ T5094] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 537.246581][ T5094] RBP: ffffc900047f79e0 R08: ffffffff815878a2 R09: fffffbfff1c39d94 [ 537.254967][ T5094] R10: dffffc0000000000 R11: fffffbfff1c39d94 R12: dffffc0000000000 [ 537.263058][ T5094] R13: ffff88804f44a440 R14: 000000000000000d R15: 1ffff11009e89488 [ 537.271531][ T5094] FS: 000055555bfdc500(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 537.280839][ T5094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.287469][ T5094] CR2: 0000001b32313ff8 CR3: 0000000063004000 CR4: 0000000000350ef0 [ 537.295578][ T5094] Call Trace: [ 537.298892][ T5094] [ 537.301904][ T5094] ? __warn+0x163/0x4e0 [ 537.306112][ T5094] ? bch2_fs_journal_stop+0x5f3/0x630 [ 537.311608][ T5094] ? report_bug+0x2b3/0x500 [ 537.316159][ T5094] ? bch2_fs_journal_stop+0x5f3/0x630 [ 537.321690][ T5094] ? handle_bug+0x3e/0x70 [ 537.326072][ T5094] ? exc_invalid_op+0x1a/0x50 [ 537.330848][ T5094] ? asm_exc_invalid_op+0x1a/0x20 [ 537.335942][ T5094] ? __warn_printk+0x292/0x360 [ 537.340814][ T5094] ? bch2_fs_journal_stop+0x5f3/0x630 [ 537.346250][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.351980][ T5094] ? __pfx_bch2_fs_journal_stop+0x10/0x10 [ 537.357756][ T5094] ? __pfx___bch2_print+0x10/0x10 [ 537.362932][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.369037][ T5094] ? __bch2_btree_flush_all+0x6dc/0x700 [ 537.374981][ T5094] ? __bch2_btree_flush_all+0x6f/0x700 [ 537.380591][ T5094] __bch2_fs_read_only+0x30c/0x430 [ 537.385767][ T5094] bch2_fs_read_only+0xb52/0x1210 [ 537.390994][ T5094] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 537.396515][ T5094] ? __bch2_print+0x17a/0x220 [ 537.401321][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.406987][ T5094] ? down_write+0x18c/0x220 [ 537.411598][ T5094] ? __pfx_down_write+0x10/0x10 [ 537.416512][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.422229][ T5094] ? hook_sb_delete+0xa5e/0xb90 [ 537.427121][ T5094] ? evict+0x577/0x630 [ 537.431368][ T5094] __bch2_fs_stop+0x105/0x540 [ 537.436099][ T5094] ? __pfx_hook_sb_delete+0x10/0x10 [ 537.441409][ T5094] ? __pfx___bch2_fs_stop+0x10/0x10 [ 537.446670][ T5094] ? __pfx_evict_inodes+0x10/0x10 [ 537.451814][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.457503][ T5094] ? __pfx_bch2_put_super+0x10/0x10 [ 537.462856][ T5094] generic_shutdown_super+0x138/0x2d0 [ 537.468288][ T5094] bch2_kill_sb+0x41/0x50 [ 537.473846][ T5094] deactivate_locked_super+0xc6/0x130 [ 537.479366][ T5094] cleanup_mnt+0x41f/0x4b0 [ 537.484167][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.489859][ T5094] ? lockdep_hardirqs_on+0x99/0x150 [ 537.495174][ T5094] task_work_run+0x251/0x310 [ 537.499825][ T5094] ? __pfx_task_work_run+0x10/0x10 [ 537.505054][ T5094] ? __x64_sys_umount+0x123/0x170 [ 537.510176][ T5094] ? syscall_exit_to_user_mode+0xa3/0x370 [ 537.514015][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2312'. [ 537.515922][ T5094] syscall_exit_to_user_mode+0x168/0x370 [ 537.515974][ T5094] do_syscall_64+0x100/0x230 [ 537.535205][ T5094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.541197][ T5094] RIP: 0033:0x7ff61cf76e87 [ 537.545654][ T5094] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 537.565599][ T5094] RSP: 002b:00007ffd4953e518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 537.574498][ T5094] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff61cf76e87 [ 537.582860][ T5094] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4953e5d0 [ 537.590944][ T5094] RBP: 00007ffd4953e5d0 R08: 0000000000000000 R09: 0000000000000000 [ 537.599032][ T5094] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd4953f690 [ 537.607070][ T5094] R13: 00007ff61cfe344c R14: 0000000000083101 R15: 0000000000082680 [ 537.615140][ T5094] [ 537.618181][ T5094] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 537.625475][ T5094] CPU: 0 PID: 5094 Comm: syz-executor Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 537.635404][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 537.645488][ T5094] Call Trace: [ 537.648791][ T5094] [ 537.651743][ T5094] dump_stack_lvl+0x241/0x360 [ 537.656469][ T5094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.661724][ T5094] ? __pfx__printk+0x10/0x10 [ 537.666361][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.672021][ T5094] ? vscnprintf+0x5d/0x90 [ 537.676379][ T5094] panic+0x349/0x860 [ 537.680334][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.686094][ T5094] ? __warn+0x172/0x4e0 [ 537.690291][ T5094] ? __pfx_panic+0x10/0x10 [ 537.694770][ T5094] __warn+0x346/0x4e0 [ 537.698801][ T5094] ? bch2_fs_journal_stop+0x5f3/0x630 [ 537.704225][ T5094] report_bug+0x2b3/0x500 [ 537.708594][ T5094] ? bch2_fs_journal_stop+0x5f3/0x630 [ 537.714028][ T5094] handle_bug+0x3e/0x70 [ 537.718228][ T5094] exc_invalid_op+0x1a/0x50 [ 537.722778][ T5094] asm_exc_invalid_op+0x1a/0x20 [ 537.727677][ T5094] RIP: 0010:bch2_fs_journal_stop+0x5f3/0x630 [ 537.733698][ T5094] Code: 44 24 18 42 80 3c 20 00 48 8b 5c 24 20 74 08 48 89 df e8 90 fb c6 fd 48 8b 13 48 c7 c7 a0 76 13 8c 4c 89 f6 e8 3e e0 22 fd 90 <0f> 0b 90 90 e9 e4 fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 7f fc ff [ 537.753333][ T5094] RSP: 0018:ffffc900047f78a0 EFLAGS: 00010246 [ 537.759425][ T5094] RAX: e9f51142e2b70c00 RBX: ffff88804f44aaa0 RCX: ffff8880259d8000 [ 537.767415][ T5094] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 537.775404][ T5094] RBP: ffffc900047f79e0 R08: ffffffff815878a2 R09: fffffbfff1c39d94 [ 537.783402][ T5094] R10: dffffc0000000000 R11: fffffbfff1c39d94 R12: dffffc0000000000 [ 537.791395][ T5094] R13: ffff88804f44a440 R14: 000000000000000d R15: 1ffff11009e89488 [ 537.799386][ T5094] ? __warn_printk+0x292/0x360 [ 537.804195][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.809842][ T5094] ? __pfx_bch2_fs_journal_stop+0x10/0x10 [ 537.815596][ T5094] ? __pfx___bch2_print+0x10/0x10 [ 537.820651][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.826297][ T5094] ? __bch2_btree_flush_all+0x6dc/0x700 [ 537.831866][ T5094] ? __bch2_btree_flush_all+0x6f/0x700 [ 537.837372][ T5094] __bch2_fs_read_only+0x30c/0x430 [ 537.842514][ T5094] bch2_fs_read_only+0xb52/0x1210 [ 537.847589][ T5094] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 537.853072][ T5094] ? __bch2_print+0x17a/0x220 [ 537.857954][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.863607][ T5094] ? down_write+0x18c/0x220 [ 537.868127][ T5094] ? __pfx_down_write+0x10/0x10 [ 537.872997][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.878647][ T5094] ? hook_sb_delete+0xa5e/0xb90 [ 537.883526][ T5094] ? evict+0x577/0x630 [ 537.887632][ T5094] __bch2_fs_stop+0x105/0x540 [ 537.892335][ T5094] ? __pfx_hook_sb_delete+0x10/0x10 [ 537.897558][ T5094] ? __pfx___bch2_fs_stop+0x10/0x10 [ 537.902792][ T5094] ? __pfx_evict_inodes+0x10/0x10 [ 537.907832][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.913486][ T5094] ? __pfx_bch2_put_super+0x10/0x10 [ 537.918796][ T5094] generic_shutdown_super+0x138/0x2d0 [ 537.924195][ T5094] bch2_kill_sb+0x41/0x50 [ 537.928545][ T5094] deactivate_locked_super+0xc6/0x130 [ 537.933942][ T5094] cleanup_mnt+0x41f/0x4b0 [ 537.938372][ T5094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.944016][ T5094] ? lockdep_hardirqs_on+0x99/0x150 [ 537.949236][ T5094] task_work_run+0x251/0x310 [ 537.953863][ T5094] ? __pfx_task_work_run+0x10/0x10 [ 537.958998][ T5094] ? __x64_sys_umount+0x123/0x170 [ 537.964050][ T5094] ? syscall_exit_to_user_mode+0xa3/0x370 [ 537.969882][ T5094] syscall_exit_to_user_mode+0x168/0x370 [ 537.975545][ T5094] do_syscall_64+0x100/0x230 [ 537.980168][ T5094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.986093][ T5094] RIP: 0033:0x7ff61cf76e87 [ 537.990524][ T5094] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 538.010165][ T5094] RSP: 002b:00007ffd4953e518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 538.018604][ T5094] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff61cf76e87 [ 538.026596][ T5094] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4953e5d0 [ 538.034581][ T5094] RBP: 00007ffd4953e5d0 R08: 0000000000000000 R09: 0000000000000000 [ 538.042653][ T5094] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd4953f690 [ 538.050666][ T5094] R13: 00007ff61cfe344c R14: 0000000000083101 R15: 0000000000082680 [ 538.058754][ T5094] [ 538.061898][ T5094] Kernel Offset: disabled [ 538.066303][ T5094] Rebooting in 86400 seconds..